diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index b98de8c4c..e36d2b6c8 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -33,10 +33,10 @@ jobs: uses: gradle/gradle-build-action@915a66c096a03101667f9df2e56c9efef558b165 # v2 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@489225d82a57396c6f426a40e66d461b16b3461d # v2 + uses: github/codeql-action/init@1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8 # v2 with: languages: ${{ matrix.language }} - run: | gradle build - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@489225d82a57396c6f426a40e66d461b16b3461d # v2 + uses: github/codeql-action/analyze@1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8 # v2 diff --git a/.github/workflows/qodana-cloud.yml b/.github/workflows/qodana-cloud.yml index cfa9374d4..480903e83 100644 --- a/.github/workflows/qodana-cloud.yml +++ b/.github/workflows/qodana-cloud.yml @@ -15,6 +15,6 @@ jobs: uses: JetBrains/qodana-action@77f0ff0c702065648df9fd0340a48919dca5a1ff # v2023.2.1 env: QODANA_TOKEN: ${{ secrets.QODANA_TOKEN }} - - uses: github/codeql-action/upload-sarif@489225d82a57396c6f426a40e66d461b16b3461d # v2 + - uses: github/codeql-action/upload-sarif@1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8 # v2 with: sarif_file: ${{ runner.temp }}/qodana/results/qodana.sarif.json \ No newline at end of file diff --git a/.github/workflows/qodana.yml b/.github/workflows/qodana.yml index a1305c123..cd039297e 100644 --- a/.github/workflows/qodana.yml +++ b/.github/workflows/qodana.yml @@ -18,6 +18,6 @@ jobs: uses: JetBrains/qodana-action@77f0ff0c702065648df9fd0340a48919dca5a1ff # v2023.2.1 with: args: "--fail-threshold,0" - - uses: github/codeql-action/upload-sarif@489225d82a57396c6f426a40e66d461b16b3461d # v2 + - uses: github/codeql-action/upload-sarif@1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8 # v2 with: sarif_file: ${{ runner.temp }}/qodana/results/qodana.sarif.json \ No newline at end of file