From c793999a94f1d3d2967c710e27515290ef8c7a38 Mon Sep 17 00:00:00 2001 From: Yuri Shkuro Date: Tue, 30 Jul 2024 11:51:29 -0300 Subject: [PATCH] Unpin codeql actions (#5787) ## Which problem is this PR solving? - Renovate bot does not upgrade these because the main branch there is on v2 - Code scanning does not need to be locked down as strictly as reproducible builds ## Description of the changes - Use v3 instead of exact commit or exact semver - The logs still show the exact version used, e.g. `CODEQL_ACTION_VERSION: 3.25.15` ## How was this change tested? - CI Signed-off-by: Yuri Shkuro Signed-off-by: Jared Tan --- .github/workflows/codeql.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 63bb415b958..e0f2737c1ee 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -44,7 +44,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11 + uses: github/codeql-action/init@v3 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -53,7 +53,7 @@ jobs: # queries: ./path/to/local/query, your-org/your-repo/queries@main - name: Autobuild - uses: github/codeql-action/autobuild@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11 + uses: github/codeql-action/autobuild@v3 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11 + uses: github/codeql-action/analyze@v3