1- # For most projects, this workflow file will not need changing; you simply need
2- # to commit it to your repository.
3- #
4- # You may wish to alter this file to override the set of languages analyzed,
5- # or to provide custom queries or build logic.
6- #
7- # ******** NOTE ********
8- # We have attempted to detect the languages in your repository. Please check
9- # the `language` matrix defined below to confirm you have the correct set of
10- # supported CodeQL languages.
11- #
121name : " CodeQL"
132
143on :
154 push :
165 branches : ["master"]
176 pull_request :
18- # The branches below must be a subset of the branches above
197 branches : ["master"]
208 schedule :
9+ # Run every Monday at midnight
2110 - cron : " 0 0 * * 1"
2211
2312permissions :
@@ -36,39 +25,21 @@ jobs:
3625 fail-fast : false
3726 matrix :
3827 language : ["cpp", "python"]
39- # CodeQL supports [ $supported-codeql-languages ]
40- # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
4128
4229 steps :
4330 - name : Checkout repository
4431 uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
4532
46- # Initializes the CodeQL tools for scanning.
4733 - name : Initialize CodeQL
48- uses : github/codeql-action/init@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v3.24.0
34+ uses : github/codeql-action/init@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
4935 with :
5036 languages : ${{ matrix.language }}
51- # If you wish to specify custom queries, you can do so here or in a config file.
52- # By default, queries listed here will override any specified in a config file.
53- # Prefix the list here with "+" to use these queries and those in the config file.
5437
55- # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
56- # If this step fails, then you should remove it and run the build manually (see below)
5738 - name : Autobuild
58- uses : github/codeql-action/autobuild@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v3.24.0
59-
60- # ℹ️ Command-line programs to run using the OS shell.
61- # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
62-
63- # If the Autobuild fails above, remove it and uncomment the following three lines.
64- # modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
65-
66- # - run: |
67- # echo "Run, Build Application using script"
68- # ./location_of_script_within_repo/buildscript.sh
39+ uses : github/codeql-action/autobuild@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
6940
7041 - name : Perform CodeQL Analysis
71- uses : github/codeql-action/analyze@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v3.24.0
42+ uses : github/codeql-action/analyze@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
7243 with :
7344 category : " /language:${{matrix.language}}"
7445
8657 run : rustup component add clippy
8758
8859 - name : Install cargo-binstall
89- uses : cargo-bins/cargo-binstall@v1 .10.6
60+ uses : cargo-bins/cargo-binstall@c175bb02c4d5486f22e1a9cb4186cb6097f01434 # 1 .10.23
9061
9162 - name : Install dependencies
9263 run : cargo binstall --no-confirm clippy-sarif sarif-fmt
10374 run : sarif-fmt --input rust/clippy.sarif
10475
10576 - name : Upload analysis
106- uses : github/codeql-action/upload-sarif@v3
77+ uses : github/codeql-action/upload-sarif@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
10778 with :
10879 sarif_file : rust/clippy.sarif
10980 wait-for-processing : true
0 commit comments