version tagging actions

Signed-off-by: shankar <shankar@layerzerolabs.org>

Author: shankars99

.github/workflows/codeql.yaml

@@ -59,6 +59,8 @@ jobs:
       matrix:
         language: ['javascript-typescript', 'rust']
 
+    # Skip autobuild - CodeQL can analyze source code directly
+    # No need to compile or install dependencies for static analysis
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -73,9 +75,6 @@ jobs:
           # Use default queries plus security-extended for more coverage
           queries: security-extended
 
-      # Skip autobuild - CodeQL can analyze source code directly
-      # No need to compile or install dependencies for static analysis
-
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v4
         with:
@@ -104,12 +103,14 @@ jobs:
           no-fail: true
 
       - name: Upload Hadolint results
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         if: always()
         with:
           sarif_file: hadolint.sarif
           category: "hadolint"
 
+# Note: ShellCheck action doesn't natively support SARIF output
+# Results will appear in workflow logs
   shellcheck:
     name: Shell Script Lint
     runs-on: ubuntu-latest
@@ -125,12 +126,10 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Run ShellCheck
-        uses: ludeeus/action-shellcheck@master
+        uses: ludeeus/action-shellcheck@2.0.0
         with:
           scandir: '.'
           format: gcc
           severity: warning
         continue-on-error: true
 
-      # Note: ShellCheck action doesn't natively support SARIF output
-      # Results will appear in workflow logs