diff --git a/.github/workflows/security-codeql.yml b/.github/workflows/security-codeql.yml index 862aee4..260f62f 100644 --- a/.github/workflows/security-codeql.yml +++ b/.github/workflows/security-codeql.yml @@ -66,7 +66,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 + uses: github/codeql-action/init@3ab4101902695724f9365a384f86c1074d94e18c with: languages: ${{ matrix.language }} @@ -74,6 +74,6 @@ jobs: queries: ${{ inputs.queries }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 + uses: github/codeql-action/analyze@3ab4101902695724f9365a384f86c1074d94e18c with: category: /language:${{matrix.language}} diff --git a/.github/workflows/security-ossf-scorecard.yml b/.github/workflows/security-ossf-scorecard.yml index fc9a8dd..d3fa025 100644 --- a/.github/workflows/security-ossf-scorecard.yml +++ b/.github/workflows/security-ossf-scorecard.yml @@ -77,6 +77,6 @@ jobs: retention-days: 5 - name: Upload results to code-scanning - uses: github/codeql-action/upload-sarif@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 + uses: github/codeql-action/upload-sarif@3ab4101902695724f9365a384f86c1074d94e18c with: sarif_file: results.sarif