diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 39fdea5..601ede4 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -41,7 +41,7 @@ jobs: echo "CODEQL_PYTHON=$(which python)" >> $GITHUB_ENV - name: Initialize CodeQL. - uses: github/codeql-action/init@dc021d495cb77b369e4d9d04a501700fd83b8c51 # v2 + uses: github/codeql-action/init@083cd45dc7d463f048a5d0975943f0e19e9c9378 # v2 with: languages: python # https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#analyzing-python-dependencies @@ -50,7 +50,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually. - name: Autobuild - uses: github/codeql-action/autobuild@dc021d495cb77b369e4d9d04a501700fd83b8c51 # v2 + uses: github/codeql-action/autobuild@083cd45dc7d463f048a5d0975943f0e19e9c9378 # v2 - name: Perform CodeQL Analysis. - uses: github/codeql-action/analyze@dc021d495cb77b369e4d9d04a501700fd83b8c51 # v2 + uses: github/codeql-action/analyze@083cd45dc7d463f048a5d0975943f0e19e9c9378 # v2