From 5a0fb6dff045cbd32caa74f83b3745e6aa5e9cd1 Mon Sep 17 00:00:00 2001 From: GitHub Copilot Agent Date: Tue, 17 Feb 2026 15:33:33 +0100 Subject: [PATCH] ci(codeql): migriere codeql-action auf v4 sha-pin --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/qodana.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 9aa2458..59da460 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -49,7 +49,7 @@ jobs: dotnet-version: "10.0.102" - name: Initialize CodeQL - uses: github/codeql-action/init@f5c2471be782132e47a6e6f9c725e56730d6e9a3 # v3 + uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3 with: languages: ${{ matrix.language }} build-mode: manual @@ -62,6 +62,6 @@ jobs: dotnet build -c Release --no-restore -v minimal FileClassifier.sln - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@f5c2471be782132e47a6e6f9c725e56730d6e9a3 # v3 + uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/qodana.yml b/.github/workflows/qodana.yml index ae6609c..d683654 100644 --- a/.github/workflows/qodana.yml +++ b/.github/workflows/qodana.yml @@ -59,7 +59,7 @@ jobs: - name: Upload SARIF To Code Scanning if: github.event_name != 'pull_request' - uses: github/codeql-action/upload-sarif@f5c2471be782132e47a6e6f9c725e56730d6e9a3 # v3 + uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3 with: sarif_file: artifacts/ci/qodana/qodana.sarif.json