Skip to content

Commit 841af3f

Browse files
committed
Update codeql
1 parent aa922e6 commit 841af3f

File tree

1 file changed

+8
-14
lines changed

1 file changed

+8
-14
lines changed

.github/workflows/codeql-analysis.yml

Lines changed: 8 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -13,30 +13,24 @@ jobs:
1313

1414
runs-on: ubuntu-latest
1515

16+
permissions:
17+
security-events: write
18+
1619
steps:
1720
- name: Checkout repository
18-
uses: actions/checkout@v2
19-
with:
20-
# We must fetch at least the immediate parents so that if this is
21-
# a pull request then we can checkout the head.
22-
fetch-depth: 2
23-
24-
# If this run was triggered by a pull request event, then checkout
25-
# the head of the pull request instead of the merge commit.
26-
- run: git checkout HEAD^2
27-
if: ${{ github.event_name == 'pull_request' }}
28-
21+
uses: actions/checkout@v3
22+
2923
# Initializes the CodeQL tools for scanning.
3024
- name: Initialize CodeQL
31-
uses: github/codeql-action/init@v1
25+
uses: github/codeql-action/init@v2
3226
# Override language selection by uncommenting this and choosing your languages
3327
# with:
3428
# languages: go, javascript, csharp, python, cpp, java
3529

3630
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
3731
# If this step fails, then you should remove it and run the build manually (see below)
3832
- name: Autobuild
39-
uses: github/codeql-action/autobuild@v1
33+
uses: github/codeql-action/autobuild@v2
4034

4135
# ℹ️ Command-line programs to run using the OS shell.
4236
# 📚 https://git.io/JvXDl
@@ -50,4 +44,4 @@ jobs:
5044
# make release
5145

5246
- name: Perform CodeQL Analysis
53-
uses: github/codeql-action/analyze@v1
47+
uses: github/codeql-action/analyze@v2

0 commit comments

Comments
 (0)