3232
3333 steps :
3434 - name : Harden Runner
35- uses : step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
35+ uses : step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
3636 with :
3737 egress-policy : audit
3838 disable-sudo : true
@@ -43,15 +43,15 @@ jobs:
4343 uploads.github.com:443
4444
4545 - name : Checkout repository
46- uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
46+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4747
4848 - name : " Dependency Review"
4949 if : github.event_name == 'pull_request'
5050 uses : actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2
5151
5252 # Initializes the CodeQL tools for scanning.
5353 - name : Initialize CodeQL
54- uses : github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v3.29.5
54+ uses : github/codeql-action/init@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v3.29.5
5555 with :
5656 languages : python
5757 # If you wish to specify custom queries, you can do so here or in a config file.
6464 # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
6565 # If this step fails, then you should remove it and run the build manually (see below)
6666 - name : Autobuild
67- uses : github/codeql-action/autobuild@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v3.29.5
67+ uses : github/codeql-action/autobuild@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v3.29.5
6868
6969 # ℹ️ Command-line programs to run using the OS shell.
7070 # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
7777 # ./location_of_script_within_repo/buildscript.sh
7878
7979 - name : Perform CodeQL Analysis
80- uses : github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v3.29.5
80+ uses : github/codeql-action/analyze@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v3.29.5
8181 with :
8282 category : " /language:python"
0 commit comments