diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 5f7f8a8..bf9da22 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -53,7 +53,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 + uses: github/codeql-action/init@6bc82e05fd0ea64601dd4b465378bbcf57de0314 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -76,6 +76,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 + uses: github/codeql-action/analyze@6bc82e05fd0ea64601dd4b465378bbcf57de0314 with: category: '/language:${{matrix.language}}' diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index c3fb73c..0d755ce 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -58,13 +58,13 @@ jobs: exit-code: '0' - name: Upload Trivy image scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 + uses: github/codeql-action/upload-sarif@6bc82e05fd0ea64601dd4b465378bbcf57de0314 with: sarif_file: 'trivy-image-results.sarif' category: 'trivy-image' - name: Upload Trivy Python scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 + uses: github/codeql-action/upload-sarif@6bc82e05fd0ea64601dd4b465378bbcf57de0314 with: sarif_file: 'trivy-py-results.sarif' category: 'trivy-python'