@@ -38,13 +38,13 @@ jobs:
38
38
39
39
steps :
40
40
- name : Checkout repository
41
- uses : actions/checkout@v4
41
+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
42
42
with :
43
43
persist-credentials : false
44
44
45
45
- name : Set up Python
46
46
if : matrix.language == 'python'
47
- uses : actions/setup-python@v5
47
+ uses : actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
48
48
49
49
- name : Install dependencies
50
50
# Needed for pycurl
54
54
55
55
# Initializes the CodeQL tools for scanning.
56
56
- name : Initialize CodeQL
57
- uses : github/codeql-action/init@v3
57
+ uses : github/codeql-action/init@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
58
58
with :
59
59
languages : ${{ matrix.language }}
60
60
# If you wish to specify custom queries, you can do so here or in a config file.
68
68
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
69
69
# If this step fails, then you should remove it and run the build manually (see below)
70
70
- name : Autobuild
71
- uses : github/codeql-action/autobuild@v3
71
+ uses : github/codeql-action/autobuild@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
72
72
73
73
# ℹ️ Command-line programs to run using the OS shell.
74
74
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
81
81
# ./location_of_script_within_repo/buildscript.sh
82
82
83
83
- name : Perform CodeQL Analysis
84
- uses : github/codeql-action/analyze@v3
84
+ uses : github/codeql-action/analyze@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
85
85
with :
86
86
category : " /language:${{matrix.language}}"
0 commit comments