3232
3333 steps :
3434 - name : Harden Runner
35- uses : step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
35+ uses : step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
3636 with :
3737 egress-policy : audit
3838 disable-sudo : true
@@ -43,15 +43,15 @@ jobs:
4343 uploads.github.com:443
4444
4545 - name : Checkout repository
46- uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 .0.0
46+ uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 .0.1
4747
4848 - name : " Dependency Review"
4949 if : github.event_name == 'pull_request'
50- uses : actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a # v4.8.1
50+ uses : actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2
5151
5252 # Initializes the CodeQL tools for scanning.
5353 - name : Initialize CodeQL
54- uses : github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v3.29.5
54+ uses : github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v3.29.5
5555 with :
5656 languages : python
5757 # If you wish to specify custom queries, you can do so here or in a config file.
6464 # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
6565 # If this step fails, then you should remove it and run the build manually (see below)
6666 - name : Autobuild
67- uses : github/codeql-action/autobuild@0499de31b99561a6d14a36a5f662c2a54f91beee # v3.29.5
67+ uses : github/codeql-action/autobuild@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v3.29.5
6868
6969 # ℹ️ Command-line programs to run using the OS shell.
7070 # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
7777 # ./location_of_script_within_repo/buildscript.sh
7878
7979 - name : Perform CodeQL Analysis
80- uses : github/codeql-action/analyze@0499de31b99561a6d14a36a5f662c2a54f91beee # v3.29.5
80+ uses : github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v3.29.5
8181 with :
8282 category : " /language:python"
0 commit comments