File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 5454
5555 # Initializes the CodeQL tools for scanning.
5656 - name : Initialize CodeQL
57- uses : github/codeql-action/init@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3
57+ uses : github/codeql-action/init@39edc492dbe16b1465b0cafca41432d857bdb31a # v3
5858 with :
5959 languages : ${{ matrix.language }}
6060 # If you wish to specify custom queries, you can do so here or in a config file.
6565 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
6666 # If this step fails, then you should remove it and run the build manually (see below)
6767 - name : Autobuild
68- uses : github/codeql-action/autobuild@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3
68+ uses : github/codeql-action/autobuild@39edc492dbe16b1465b0cafca41432d857bdb31a # v3
6969
7070 # ℹ️ Command-line programs to run using the OS shell.
7171 # 📚 https://git.io/JvXDl
7979 # make release
8080
8181 - name : Perform CodeQL Analysis
82- uses : github/codeql-action/analyze@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3
82+ uses : github/codeql-action/analyze@39edc492dbe16b1465b0cafca41432d857bdb31a # v3
Original file line number Diff line number Diff line change 2929 # with '-no-fail' we let the report trigger content trigger a failure using the GitHub Security features.
3030 args : " -no-fail -fmt sarif -out gosec.sarif ./..."
3131 - name : Upload SARIF file for GitHub Advanced Security Dashboard
32- uses : github/codeql-action/upload-sarif@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3
32+ uses : github/codeql-action/upload-sarif@39edc492dbe16b1465b0cafca41432d857bdb31a # v3
3333 with :
3434 sarif_file : gosec.sarif
3535
6161 fi
6262 EOF
6363 - name : Upload SARIF file for GitHub Advanced Security Dashboard
64- uses : github/codeql-action/upload-sarif@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3
64+ uses : github/codeql-action/upload-sarif@39edc492dbe16b1465b0cafca41432d857bdb31a # v3
6565 with :
6666 sarif_file : semgrep.sarif
6767
You can’t perform that action at this time.
0 commit comments