4141
4242 steps :
4343 - name : Harden Runner
44- uses : step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
44+ uses : step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
4545 with :
4646 disable-sudo : true
4747 egress-policy : block
@@ -52,11 +52,11 @@ jobs:
5252 *.githubusercontent.com:443
5353
5454 - name : Checkout repository
55- uses : actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
55+ uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
5656
5757 # Initializes the CodeQL tools for scanning.
5858 - name : Initialize CodeQL
59- uses : github/codeql-action/init@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1
59+ uses : github/codeql-action/init@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
6060 with :
6161 languages : ${{ matrix.language }}
6262 # If you wish to specify custom queries, you can do so here or in a config file.
6969 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
7070 # If this step fails, then you should remove it and run the build manually (see below)
7171 - name : Autobuild
72- uses : github/codeql-action/autobuild@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1
72+ uses : github/codeql-action/autobuild@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
7373
7474 # ℹ️ Command-line programs to run using the OS shell.
7575 # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
8282 # ./location_of_script_within_repo/buildscript.sh
8383
8484 - name : Perform CodeQL Analysis
85- uses : github/codeql-action/analyze@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1
85+ uses : github/codeql-action/analyze@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
8686 with :
8787 category : " /language:${{matrix.language}}"
0 commit comments