@@ -36,41 +36,18 @@ jobs:
3636 # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]
3737 # Learn more:
3838 # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
39-
4039 steps :
4140 - name : Checkout repository
4241 uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
43-
44- - name : Setup Go
45- uses : actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
42+ - name : Install Go
43+ uses : actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
4644 with :
4745 go-version-file : go.mod
48-
49- # Initializes the CodeQL tools for scanning.
5046 - name : Initialize CodeQL
51- uses : github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
47+ uses : github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
5248 with :
5349 languages : ${{ matrix.language }}
54- # If you wish to specify custom queries, you can do so here or in a config file.
55- # By default, queries listed here will override any specified in a config file.
56- # Prefix the list here with "+" to use these queries and those in the config file.
57- # queries: ./path/to/local/query, your-org/your-repo/queries@main
58-
59- # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
60- # If this step fails, then you should remove it and run the build manually (see below)
6150 - name : Autobuild
62- uses : github/codeql-action/autobuild@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
63-
64- # ℹ️ Command-line programs to run using the OS shell.
65- # 📚 https://git.io/JvXDl
66-
67- # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
68- # and modify them (or add more) to build your code if your project
69- # uses a compiled language
70-
71- # - run: |
72- # make bootstrap
73- # make release
74-
51+ uses : github/codeql-action/autobuild@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
7552 - name : Perform CodeQL Analysis
76- uses : github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3
53+ uses : github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
0 commit comments