4141
4242 steps :
4343 - name : Harden Runner
44- uses : step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
44+ uses : step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
4545 with :
4646 disable-sudo : true
4747 egress-policy : block
@@ -51,11 +51,11 @@ jobs:
5151 objects.githubusercontent.com:443
5252
5353 - name : Checkout repository
54- uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
54+ uses : actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
5555
5656 # Initializes the CodeQL tools for scanning.
5757 - name : Initialize CodeQL
58- uses : github/codeql-action/init@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
58+ uses : github/codeql-action/init@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
5959 with :
6060 languages : ${{ matrix.language }}
6161 # If you wish to specify custom queries, you can do so here or in a config file.
6969 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
7070 # If this step fails, then you should remove it and run the build manually (see below)
7171 - name : Autobuild
72- uses : github/codeql-action/autobuild@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
72+ uses : github/codeql-action/autobuild@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
7373
7474 # ℹ️ Command-line programs to run using the OS shell.
7575 # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
8282 # ./location_of_script_within_repo/buildscript.sh
8383
8484 - name : Perform CodeQL Analysis
85- uses : github/codeql-action/analyze@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
85+ uses : github/codeql-action/analyze@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
8686 with :
8787 category : " /language:${{matrix.language}}"
0 commit comments