Read-only mirrors. Development, issues and pull requests are on GitHub.

summaryrefslogtreecommitdiffhomepage
path: root/.github/workflows
diff options
context:
space:
mode:
authorLeitwolf112026-11-05 07:09:35 +0300
committerLeitwolf112026-11-05 07:09:35 +0300
commite8bb137bbae31105e1c753081a70c32daf835d18 (patch)
tree09536f4b2d4df77ddf2e6a00651de40fe37547f8 /.github/workflows
parent286256c6f9e8c1fa272ea1d7ea5631a41377f3f5 (diff)
downloadtazel.net-ci/quality.tar.gz
Pin the CodeQL action to v4.39.3 with its versionci/quality
zizmor found that the pinned commit was not the one the v4 comment named; the pin is the commit of v4.39.3 and says so. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to '.github/workflows')
-rw-r--r--.github/workflows/codeql.yml4
1 files changed, 2 insertions, 2 deletions
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 597e05e..2ff7852 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -25,12 +25,12 @@ jobs:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- - uses: github/codeql-action/init@7999b86c43a865dc79d8923397f35af22de63401 # v4
+ - uses: github/codeql-action/init@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3
with:
languages: ${{ matrix.language }}
build-mode: none
config-file: ./.github/codeql/codeql-config.yml
queries: security-extended
- - uses: github/codeql-action/analyze@7999b86c43a865dc79d8923397f35af22de63401 # v4
+ - uses: github/codeql-action/analyze@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3
with:
category: /language:${{ matrix.language }}