diff options
| author | Leitwolf11 | 2026-11-05 07:09:44 +0300 |
|---|---|---|
| committer | Leitwolf11 | 2026-11-05 07:09:44 +0300 |
| commit | 81dc32cf25a8efe117eff48d3ce832ffbf57068a (patch) | |
| tree | 745a5efcbd69259874852b0c26cdf0bc95250d9f | |
| parent | 307aa5e8825c7b087d3257a8ed80dc508e3f475e (diff) | |
| download | tazelish-81dc32cf25a8efe117eff48d3ce832ffbf57068a.tar.gz | |
Pin the CodeQL action to v4.39.3 with its version
zizmor found that the pinned commit was not the one the v4 comment
named; the pin is the commit of v4.39.3 and says so.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
| -rw-r--r-- | .github/workflows/codeql.yml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 388864c..616e96d 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -25,12 +25,12 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: github/codeql-action/init@7999b86c43a865dc79d8923397f35af22de63401 # v4 + - uses: github/codeql-action/init@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3 with: languages: ${{ matrix.language }} build-mode: none config-file: ./.github/codeql/codeql-config.yml queries: security-extended - - uses: github/codeql-action/analyze@7999b86c43a865dc79d8923397f35af22de63401 # v4 + - uses: github/codeql-action/analyze@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3 with: category: /language:${{ matrix.language }} |