diff --git a/.github/workflows/codeql.ci.yml b/.github/workflows/codeql.ci.yml index b58bd6a..3e80191 100644 --- a/.github/workflows/codeql.ci.yml +++ b/.github/workflows/codeql.ci.yml @@ -28,7 +28,7 @@ jobs: uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - name: Initialize CodeQL continue-on-error: true - uses: github/codeql-action/init@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8 + uses: github/codeql-action/init@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6 with: config-file: ./.github/codeql/codeql-config.yml - name: "Gradle Build" @@ -52,4 +52,4 @@ jobs: -Pci=true - name: Perform CodeQL Analysis continue-on-error: true - uses: github/codeql-action/analyze@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8 + uses: github/codeql-action/analyze@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6 diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 0c9e5a6..e07ce0f 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -43,6 +43,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8 + uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6 with: sarif_file: results.sarif