44# You may wish to alter this file to override the set of languages analyzed,
55# or to provide custom queries or build logic.
66name : " CodeQL"
7-
87on :
98 merge_group :
109 branches : master
1514 branches : [master]
1615 schedule :
1716 - cron : ' 0 11 * * 5'
18-
1917jobs :
2018 analyze :
2119 name : Analyze
2220 runs-on : ubuntu-latest
23-
2421 strategy :
2522 fail-fast : false
2623 matrix :
@@ -29,36 +26,30 @@ jobs:
2926 language : ['javascript']
3027 # Learn more...
3128 # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
32-
3329 steps :
34- - name : Checkout repository
35- uses : actions/checkout@v4
36-
37- # Initializes the CodeQL tools for scanning.
38- - name : Initialize CodeQL
39- uses : github/codeql-action/init@v3
40- with :
41- languages : ${{ matrix.language }}
42- # If you wish to specify custom queries, you can do so here or in a config file.
43- # By default, queries listed here will override any specified in a config file.
44- # Prefix the list here with "+" to use these queries and those in the config file.
45- # queries: ./path/to/local/query, your-org/your-repo/queries@main
46-
47- # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
48- # If this step fails, then you should remove it and run the build manually (see below)
49- - name : Autobuild
50- uses : github/codeql-action/autobuild@v3
51-
52- # ℹ️ Command-line programs to run using the OS shell.
53- # 📚 https://git.io/JvXDl
54-
55- # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
56- # and modify them (or add more) to build your code if your project
57- # uses a compiled language
58-
59- # - run: |
60- # make bootstrap
61- # make release
62-
63- - name : Perform CodeQL Analysis
64- uses : github/codeql-action/analyze@v3
30+ - name : Checkout repository
31+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
32+ # Initializes the CodeQL tools for scanning.
33+ - name : Initialize CodeQL
34+ uses : github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
35+ with :
36+ languages : ${{ matrix.language }}
37+ # If you wish to specify custom queries, you can do so here or in a config file.
38+ # By default, queries listed here will override any specified in a config file.
39+ # Prefix the list here with "+" to use these queries and those in the config file.
40+ # queries: ./path/to/local/query, your-org/your-repo/queries@main
41+ # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
42+ # If this step fails, then you should remove it and run the build manually (see below)
43+ - name : Autobuild
44+ uses : github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
45+ # - run: |
46+ # make bootstrap
47+ # make release
48+ - name : Perform CodeQL Analysis
49+ # ℹ️ Command-line programs to run using the OS shell.
50+ # 📚 https://git.io/JvXDl
51+
52+ # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
53+ # and modify them (or add more) to build your code if your project
54+ # uses a compiled language
55+ uses : github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
0 commit comments