diff options
| author | Leitwolf11 | 2026-11-09 00:42:34 +0300 |
|---|---|---|
| committer | Leitwolf11 | 2026-11-09 00:42:34 +0300 |
| commit | cc1c53218b6357df95f015a81c1d89787bfe054d (patch) | |
| tree | f53dd3f60b861910c67869d82030f2cb86833ec4 /.github | |
| parent | f7b935972ae17dfab13195a51f3d1f3b89d77c48 (diff) | |
| download | catch3-ci/codeql-pin.tar.gz | |
Pin the CodeQL action to its v4.38.2 releaseci/codeql-pin
The init and analyze steps were pinned to 7999b86c, a commit no release tag
points at, with a "# v4" comment that names another commit (zizmor
ref-version-mismatch, two code-scanning alerts). Both steps now use
2892aa5e, the commit of v4.38.2, with that exact version as the comment.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to '.github')
| -rw-r--r-- | .github/workflows/codeql.yml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index eb257972..183a69cb 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -24,13 +24,13 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: github/codeql-action/init@7999b86c43a865dc79d8923397f35af22de63401 # v4 + - uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: languages: ${{ matrix.language }} build-mode: none config-file: ./.github/codeql/codeql-config.yml queries: security-extended - - uses: github/codeql-action/analyze@7999b86c43a865dc79d8923397f35af22de63401 # v4 + - uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: category: /language:${{ matrix.language }} |