diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 5f7f8a8..ed48b68 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -53,7 +53,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 + uses: github/codeql-action/init@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -76,6 +76,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 + uses: github/codeql-action/analyze@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 with: category: '/language:${{matrix.language}}' diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index c3fb73c..bda0299 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -58,13 +58,13 @@ jobs: exit-code: '0' - name: Upload Trivy image scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 + uses: github/codeql-action/upload-sarif@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 with: sarif_file: 'trivy-image-results.sarif' category: 'trivy-image' - name: Upload Trivy Python scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 + uses: github/codeql-action/upload-sarif@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 with: sarif_file: 'trivy-py-results.sarif' category: 'trivy-python'