diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index f29411e8c..1382fb3ca 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -46,7 +46,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL if: steps.changes.outputs.gocode == 'true' - uses: github/codeql-action/init@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13 + uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 with: languages: '${{ matrix.language }}' @@ -57,4 +57,4 @@ jobs: - name: Perform CodeQL Analysis if: steps.changes.outputs.gocode == 'true' - uses: github/codeql-action/analyze@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13 + uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 diff --git a/.github/workflows/terraform.yml b/.github/workflows/terraform.yml index d96237741..139dec90d 100644 --- a/.github/workflows/terraform.yml +++ b/.github/workflows/terraform.yml @@ -80,7 +80,7 @@ jobs: tfsec_args: --force-all-dirs --verbose - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13 + uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 with: # Path to SARIF file relative to the root of the repository sarif_file: tfsec.sarif