File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1414
1515 steps :
1616 - name : Harden Runner
17- uses : step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
17+ uses : step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
1818 with :
1919 egress-policy : audit
2020
Original file line number Diff line number Diff line change 4141
4242 steps :
4343 - name : Harden Runner
44- uses : step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
44+ uses : step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
4545 with :
4646 egress-policy : audit
4747
5050
5151 # Initializes the CodeQL tools for scanning.
5252 - name : Initialize CodeQL
53- uses : github/codeql-action/init@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
53+ uses : github/codeql-action/init@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
5454 with :
5555 languages : ${{ matrix.language }}
5656 # If you wish to specify custom queries, you can do so here or in a config file.
6060 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
6161 # If this step fails, then you should remove it and run the build manually (see below)
6262 - name : Autobuild
63- uses : github/codeql-action/autobuild@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
63+ uses : github/codeql-action/autobuild@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
6464
6565 # ℹ️ Command-line programs to run using the OS shell.
6666 # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
7373 # ./location_of_script_within_repo/buildscript.sh
7474
7575 - name : Perform CodeQL Analysis
76- uses : github/codeql-action/analyze@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
76+ uses : github/codeql-action/analyze@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
7777 with :
7878 category : " /language:${{matrix.language}}"
Original file line number Diff line number Diff line change @@ -17,11 +17,11 @@ jobs:
1717 runs-on : ubuntu-latest
1818 steps :
1919 - name : Harden Runner
20- uses : step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
20+ uses : step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2121 with :
2222 egress-policy : audit
2323
2424 - name : ' Checkout Repository'
2525 uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2626 - name : ' Dependency Review'
27- uses : actions/dependency-review-action@bc41886e18ea39df68b1b1245f4184881938e050 # v4.7.2
27+ uses : actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3
Original file line number Diff line number Diff line change @@ -32,14 +32,14 @@ jobs:
3232 runs-on : ubuntu-latest
3333 steps :
3434 - name : Harden Runner
35- uses : step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
35+ uses : step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
3636 with :
3737 egress-policy : audit
3838
3939 - name : Checkout
4040 uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4141 - name : Setup Ruby
42- uses : ruby/setup-ruby@efbf473cab83af4468e8606cc33eca9281bb213f # v1.256 .0
42+ uses : ruby/setup-ruby@cf7216d52fba1017929b4d7162fabe2b30af5b49 # v1.262 .0
4343 with :
4444 ruby-version : ' 3.2.2'
4545 bundler-cache : true
6464 needs : build
6565 steps :
6666 - name : Harden Runner
67- uses : step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
67+ uses : step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
6868 with :
6969 egress-policy : audit
7070
Original file line number Diff line number Diff line change 3131
3232 steps :
3333 - name : Harden Runner
34- uses : step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
34+ uses : step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
3535 with :
3636 egress-policy : audit
3737
7171
7272 # Upload the results to GitHub's code scanning dashboard.
7373 - name : " Upload to code-scanning"
74- uses : github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
74+ uses : github/codeql-action/upload-sarif@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
7575 with :
7676 sarif_file : results.sarif
You can’t perform that action at this time.
0 commit comments