diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 05be232..ad6f6d9 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -54,7 +54,7 @@ jobs: uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 - name: Initialize CodeQL - uses: github/codeql-action/init@cc7986c02bac29104a72998e67239bb5ee2ee110 + uses: github/codeql-action/init@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa with: languages: ${{ matrix.language }} # queries: security-extended,security-and-quality # https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs @@ -71,4 +71,4 @@ jobs: run: dotnet build src/EditRelease.sln --configuration Release --no-restore /p:UseSharedCompilation=false - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@cc7986c02bac29104a72998e67239bb5ee2ee110 + uses: github/codeql-action/analyze@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa diff --git a/.github/workflows/docker-linter.yml b/.github/workflows/docker-linter.yml index a7cf893..90fdf27 100644 --- a/.github/workflows/docker-linter.yml +++ b/.github/workflows/docker-linter.yml @@ -49,7 +49,7 @@ jobs: no-fail: true - name: Upload Results - uses: github/codeql-action/upload-sarif@cc7986c02bac29104a72998e67239bb5ee2ee110 + uses: github/codeql-action/upload-sarif@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa with: sarif_file: hadolint-results.sarif wait-for-processing: true diff --git a/.github/workflows/openssf-scorecards.yml b/.github/workflows/openssf-scorecards.yml index 280e7fc..3e5b5da 100644 --- a/.github/workflows/openssf-scorecards.yml +++ b/.github/workflows/openssf-scorecards.yml @@ -56,6 +56,6 @@ jobs: retention-days: 5 - name: Upload to Code-Scanning - uses: github/codeql-action/upload-sarif@cc7986c02bac29104a72998e67239bb5ee2ee110 + uses: github/codeql-action/upload-sarif@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa with: sarif_file: results.sarif