From 61decdf70ac68ae570f07f7948ba387349a1c66d Mon Sep 17 00:00:00 2001 From: Olga Malysheva Date: Wed, 17 Jul 2024 04:03:49 -0500 Subject: [PATCH] Use version without hash --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index d47b37c550..63cd900175 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -46,7 +46,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1 + uses: step-security/harden-runner@v2.6.1 with: egress-policy: audit @@ -62,7 +62,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10 + uses: github/codeql-action/autobuild@v3.24.10 # If the analyze step fails for one of the languages you are analyzing with # "We were unable to automatically build your code", modify the matrix above