diff --git a/.github/workflows/__code-analysis--codeql.yml b/.github/workflows/__code-analysis--codeql.yml index 1138f553..54fc1c7d 100644 --- a/.github/workflows/__code-analysis--codeql.yml +++ b/.github/workflows/__code-analysis--codeql.yml @@ -30,16 +30,16 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@b2c19fb9a2a485599ccf4ed5d65527d94bc57226 # v2 + uses: github/codeql-action/init@e2b57b01d64b69ac273abfbea5d3ed15231e1706 # v2 with: languages: javascript # Autobuild attempts to build any compiled languages - name: Autobuild - uses: github/codeql-action/autobuild@b2c19fb9a2a485599ccf4ed5d65527d94bc57226 # v2 + uses: github/codeql-action/autobuild@e2b57b01d64b69ac273abfbea5d3ed15231e1706 # v2 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@b2c19fb9a2a485599ccf4ed5d65527d94bc57226 # v2 + uses: github/codeql-action/analyze@e2b57b01d64b69ac273abfbea5d3ed15231e1706 # v2 - name: Setup Job id: setup @@ -53,7 +53,7 @@ jobs: --configuration=codeql - name: Upload Lint CodeQL - uses: github/codeql-action/upload-sarif@b2c19fb9a2a485599ccf4ed5d65527d94bc57226 # v2 + uses: github/codeql-action/upload-sarif@e2b57b01d64b69ac273abfbea5d3ed15231e1706 # v2 with: sarif_file: reports/packages/nx-mesh/lint.sarif wait-for-processing: true