@@ -38,16 +38,16 @@ jobs:
3838
3939 steps :
4040 - name : Harden Runner
41- uses : step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969 # v2.4.0
41+ uses : step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
4242 with :
4343 egress-policy : audit
4444
4545 - name : Checkout repository
46- uses : actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
46+ uses : actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
4747
4848 # Initializes the CodeQL tools for scanning.
4949 - name : Initialize CodeQL
50- uses : github/codeql-action/init@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3
50+ uses : github/codeql-action/init@00e563ead9f72a8461b24876bee2d0c2e8bd2ee8 # v2.21.5
5151 with :
5252 languages : ${{ matrix.language }}
5353 # If you wish to specify custom queries, you can do so here or in a config file.
6161 # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
6262 # If this step fails, then you should remove it and run the build manually (see below)
6363 - name : Autobuild
64- uses : github/codeql-action/autobuild@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3
64+ uses : github/codeql-action/autobuild@00e563ead9f72a8461b24876bee2d0c2e8bd2ee8 # v2.21.5
6565
6666 # ℹ️ Command-line programs to run using the OS shell.
6767 # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
7474 # ./location_of_script_within_repo/buildscript.sh
7575
7676 - name : Perform CodeQL Analysis
77- uses : github/codeql-action/analyze@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3
77+ uses : github/codeql-action/analyze@00e563ead9f72a8461b24876bee2d0c2e8bd2ee8 # v2.21.5
7878 with :
7979 category : " /language:${{matrix.language}}"
0 commit comments