3232
3333 steps :
3434 - name : Harden Runner
35- uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11 .0
35+ uses : step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12 .0
3636 with :
3737 egress-policy : audit
3838 disable-sudo : true
@@ -47,11 +47,11 @@ jobs:
4747
4848 - name : " Dependency Review"
4949 if : github.event_name == 'pull_request'
50- uses : actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5 .0
50+ uses : actions/dependency-review-action@ce3cf9537a52e8119d91fd484ab5b8a807627bf8 # v4.6 .0
5151
5252 # Initializes the CodeQL tools for scanning.
5353 - name : Initialize CodeQL
54- uses : github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
54+ uses : github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
5555 with :
5656 languages : python
5757 # If you wish to specify custom queries, you can do so here or in a config file.
6464 # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
6565 # If this step fails, then you should remove it and run the build manually (see below)
6666 - name : Autobuild
67- uses : github/codeql-action/autobuild@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
67+ uses : github/codeql-action/autobuild@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
6868
6969 # ℹ️ Command-line programs to run using the OS shell.
7070 # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
7777 # ./location_of_script_within_repo/buildscript.sh
7878
7979 - name : Perform CodeQL Analysis
80- uses : github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
80+ uses : github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
8181 with :
8282 category : " /language:python"
0 commit comments