diff --git a/.github/workflows/scan-codeql.yaml b/.github/workflows/scan-codeql.yaml index 7283b10a..71e182bb 100644 --- a/.github/workflows/scan-codeql.yaml +++ b/.github/workflows/scan-codeql.yaml @@ -42,7 +42,7 @@ jobs: uses: ./.github/actions/golang - name: Initialize CodeQL - uses: github/codeql-action/init@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 + uses: github/codeql-action/init@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3 with: languages: ${{ matrix.language }} # config-file: ./.github/codeql.yaml #Uncomment once config file is needed. @@ -52,7 +52,7 @@ jobs: - name: Perform CodeQL Analysis id: scan - uses: github/codeql-action/analyze@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 + uses: github/codeql-action/analyze@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/scan-gosec.yaml b/.github/workflows/scan-gosec.yaml index 1c813565..ec595f3d 100644 --- a/.github/workflows/scan-gosec.yaml +++ b/.github/workflows/scan-gosec.yaml @@ -42,6 +42,6 @@ jobs: retention-days: 5 - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 + uses: github/codeql-action/upload-sarif@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3 with: sarif_file: results.sarif \ No newline at end of file diff --git a/.github/workflows/scan-kics.yaml b/.github/workflows/scan-kics.yaml index 57653912..19d813f3 100644 --- a/.github/workflows/scan-kics.yaml +++ b/.github/workflows/scan-kics.yaml @@ -39,7 +39,7 @@ jobs: retention-days: 5 - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 + uses: github/codeql-action/upload-sarif@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3 with: sarif_file: results.sarif diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml index f1548883..10d8eac4 100644 --- a/.github/workflows/scorecard.yaml +++ b/.github/workflows/scorecard.yaml @@ -46,6 +46,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 + uses: github/codeql-action/upload-sarif@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3 with: sarif_file: results.sarif \ No newline at end of file