From e525abc5e049fde4a2a254e7d324f9150dd2975b Mon Sep 17 00:00:00 2001 From: Kevin Liu Date: Mon, 2 Mar 2026 11:17:41 -0800 Subject: [PATCH] update codeql with pinned version --- .github/workflows/codeql.yml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index da1eec25..c8e2ebcc 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -40,14 +40,16 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + with: + persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@v4 + uses: github/codeql-action/init@c793b717bc78562f491db7b0e93a3a178b099162 # v4 with: languages: actions - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4 + uses: github/codeql-action/analyze@c793b717bc78562f491db7b0e93a3a178b099162 # v4 with: category: "/language:actions"