STRLCPY/scorecard

■ ■ ■ ■ ■ ■

.github/workflows/codeql-analysis.yml

		skipped 61 lines
62	62		# Initializes the CodeQL tools for scanning.
63	63		- name: Initialize CodeQL
64	64
65		-	uses: github/codeql-action/init@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v1
	65	+	uses: github/codeql-action/init@16964e90ba004cdf0cd845b866b5df21038b7723 # v1
66	66		with:
67	67		languages: ${{ matrix.language }}
68	68		queries: +security-extended
		skipped 5 lines
74	74		# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
75	75		# If this step fails, then you should remove it and run the build manually (see below)
76	76		- name: Autobuild
77		-	uses: github/codeql-action/autobuild@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v1
	77	+	uses: github/codeql-action/autobuild@16964e90ba004cdf0cd845b866b5df21038b7723 # v1
78	78
79	79		# ℹ️ Command-line programs to run using the OS shell.
80	80		# 📚 https://git.io/JvXDl
		skipped 7 lines
88	88		# make release
89	89
90	90		- name: Perform CodeQL Analysis
91		-	uses: github/codeql-action/analyze@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v1
	91	+	uses: github/codeql-action/analyze@16964e90ba004cdf0cd845b866b5df21038b7723 # v1
92	92

■ ■ ■ ■ ■ ■

.github/workflows/scorecard-analysis.yml

		skipped 46 lines
47	47		retention-days: 5
48	48
49	49		- name: "Upload SARIF results"
50		-	uses: github/codeql-action/upload-sarif@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v1
	50	+	uses: github/codeql-action/upload-sarif@16964e90ba004cdf0cd845b866b5df21038b7723 # v1
51	51		with:
52	52		sarif_file: results.sarif
53	53