From 6ab41db12ad4e63113411fcc2d3d383efc4c7eb8 Mon Sep 17 00:00:00 2001 From: yevh Date: Thu, 6 Feb 2025 08:34:23 +0100 Subject: [PATCH] Update codeql.yml (#501) --- .github/workflows/codeql.yml | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 9d03e4f76..53fbf48f2 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -20,20 +20,22 @@ jobs: strategy: fail-fast: false matrix: - language: ["go"] + language: ["go", "actions"] steps: - name: Checkout repository - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 #v4.2.0 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@5618c9fc1e675841ca52c1c6b1304f5255a905a0 #v2.19.0 + uses: github/codeql-action/init@7e3036b9cd87fc26dd06747b7aa4b96c27aaef3a #v2.20.3 with: languages: ${{ matrix.language }} + queries: security-and-quality + packs: githubsecuritylab/codeql-go-queries - name: Autobuild - uses: github/codeql-action/autobuild@5618c9fc1e675841ca52c1c6b1304f5255a905a0 #v2.19.0 + uses: github/codeql-action/autobuild@7e3036b9cd87fc26dd06747b7aa4b96c27aaef3a #v2.20.3 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@5618c9fc1e675841ca52c1c6b1304f5255a905a0 #v2.19.0 + uses: github/codeql-action/analyze@7e3036b9cd87fc26dd06747b7aa4b96c27aaef3a #v2.20.3