diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index 721e162dae..5977c4fea8 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -163,6 +163,6 @@ jobs: output: 'trivy-results.sarif' - name: Upload Trivy SARIF report - uses: github/codeql-action/upload-sarif@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15 + uses: github/codeql-action/upload-sarif@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0 with: sarif_file: trivy-results.sarif diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index d311e4bfb6..8c1948e5e0 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -60,7 +60,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15 + uses: github/codeql-action/init@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -87,6 +87,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15 + uses: github/codeql-action/analyze@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0 with: category: "/language:${{matrix.language}}" \ No newline at end of file diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 547a34e2c6..fc65725c35 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -157,6 +157,6 @@ jobs: output: 'trivy-results.sarif' - name: Upload Trivy SARIF report - uses: github/codeql-action/upload-sarif@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15 + uses: github/codeql-action/upload-sarif@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0 with: sarif_file: trivy-results.sarif