summaryrefslogtreecommitdiff
path: root/.github/workflows/Code-Scanning.yml
diff options
context:
space:
mode:
author5an7y-Microsoft <[email protected]>2026-08-12 12:59:43 -0700
committerGitHub <[email protected]>2026-08-12 12:59:43 -0700
commit34c8e967f0fc9bac4febbad50e1999d0d8f5923f (patch)
treeb789cd099a46febff8c42f3f056574b05a086080 /.github/workflows/Code-Scanning.yml
parentd16b5441bfa525d704159335c9f9693b68d059d2 (diff)
parent1973f21a04ef9e9af6f3ba9f8688accd8aca1c5d (diff)
Merge pull request #1410 from danfiedler-msft/danfiedler/pin-actions
Pin GitHub Actions to full-length commit SHAs
Diffstat (limited to '.github/workflows/Code-Scanning.yml')
-rw-r--r--.github/workflows/Code-Scanning.yml8
1 files changed, 4 insertions, 4 deletions
diff --git a/.github/workflows/Code-Scanning.yml b/.github/workflows/Code-Scanning.yml
index 06346d21..507b227f 100644
--- a/.github/workflows/Code-Scanning.yml
+++ b/.github/workflows/Code-Scanning.yml
@@ -41,18 +41,18 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v4
+ uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
with:
submodules: 'recursive'
- name: Install Nuget Packages
run: nuget restore .\packages.config -PackagesDirectory .\packages\
- name: Get changed files
id: get-changed-files
- uses: tj-actions/changed-files@v46
+ uses: tj-actions/changed-files@ed68ef82c095e0d48ec87eccea555d944a631a4c # v46.0.5
with:
separator: ","
- name: Initialize CodeQL
- uses: github/codeql-action/init@v3
+ uses: github/codeql-action/init@c4dd10e44af883a891fe31ced449bcb4a6728b9b # v3.37.6
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
@@ -72,6 +72,6 @@ jobs:
WDS_Platform: x64
WDS_WipeOutputs: ${{ true }}
- name: Perform CodeQL analysis
- uses: github/codeql-action/analyze@v3
+ uses: github/codeql-action/analyze@c4dd10e44af883a891fe31ced449bcb4a6728b9b # v3.37.6
with:
category: "/language:${{matrix.language}}"