diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml index aabf542..c1b3ee1 100644 --- a/.github/workflows/security.yaml +++ b/.github/workflows/security.yaml @@ -29,7 +29,7 @@ jobs: severity: 'CRITICAL,HIGH' skip-dirs: 'docs/content/docs,docs/build' - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1 + uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2 with: sarif_file: 'trivy-results.sarif' @@ -46,12 +46,12 @@ jobs: with: go-version: 1.22.5 - name: Initialize CodeQL - uses: github/codeql-action/init@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1 + uses: github/codeql-action/init@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2 with: languages: go queries: security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1 + uses: github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2 with: category: "/language:go"