diff options
| author | Leitwolf11 | 2026-11-09 00:42:31 +0300 |
|---|---|---|
| committer | Leitwolf11 | 2026-11-09 00:42:31 +0300 |
| commit | 5552879a1e328711319051a9b074b5769f69564e (patch) | |
| tree | dae46391c7fc35d2fe7d3f5bb31c8e757fc2dbba | |
| parent | 9660d2c5f0bda5d666ed076a0e18d5cb2dbe881d (diff) | |
| download | website-5552879a1e328711319051a9b074b5769f69564e.tar.gz | |
Pin the CodeQL action to its v4.38.2 release
The init and analyze steps were pinned to 7999b86c, a commit no release tag
points at, with a "# v4" comment that names another commit (zizmor
ref-version-mismatch, two code-scanning alerts). Both steps now use
2892aa5e, the commit of v4.38.2, with that exact version as the comment.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
| -rw-r--r-- | .github/workflows/codeql.yml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index b565115..ebee1eb 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -35,7 +35,7 @@ jobs: if: matrix.language == 'csharp' with: dotnet-version: 10.0.x - - uses: github/codeql-action/init@7999b86c43a865dc79d8923397f35af22de63401 # v4 + - uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build_mode }} @@ -46,6 +46,6 @@ jobs: run: | dotnet restore Progmasoft.Tala.Website.slnx --locked-mode dotnet build Progmasoft.Tala.Website.slnx --configuration Release --no-restore - - uses: github/codeql-action/analyze@7999b86c43a865dc79d8923397f35af22de63401 # v4 + - uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: category: /language:${{ matrix.language }} |