diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 9aa6999..be43626 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -44,11 +44,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@6f5948dfacef28e207b48d0905cf90c03365536d # v3 + uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -62,11 +62,11 @@ jobs: - name: Set up NuGet if: matrix.language == 'csharp' - uses: NuGet/setup-nuget@d105a947828025cd7a980103c35ba2bfae586d0f # v2 + uses: NuGet/setup-nuget@b26b823c478ee115be5c9403e62c90b0bf943843 # v3.1.0 - name: Set up MSBuild if: matrix.language == 'csharp' - uses: microsoft/setup-msbuild@6fb02220983dee41ce7ae257b6f4d8f9bf5ed4ce # v2 + uses: microsoft/setup-msbuild@30375c66a4eea26614e0d39710365f22f8b0af57 # v3.0.0 - name: Restore C# dependencies if: matrix.language == 'csharp' @@ -77,4 +77,4 @@ jobs: run: msbuild Data/WebTable/WebTableProcessing/WebTableProcessing.sln /m /p:Configuration=Release /p:Platform="Any CPU" - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@6f5948dfacef28e207b48d0905cf90c03365536d # v3 + uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9