File tree Expand file tree Collapse file tree 7 files changed +17
-17
lines changed Expand file tree Collapse file tree 7 files changed +17
-17
lines changed Original file line number Diff line number Diff line change 4141
4242 steps :
4343 - name : Harden Runner
44- uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
44+ uses : step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
4545 with :
4646 disable-sudo : true
4747 egress-policy : block
5656
5757 # Initializes the CodeQL tools for scanning.
5858 - name : Initialize CodeQL
59- uses : github/codeql-action/init@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
59+ uses : github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
6060 with :
6161 languages : ${{ matrix.language }}
6262 # If you wish to specify custom queries, you can do so here or in a config file.
6666 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
6767 # If this step fails, then you should remove it and run the build manually (see below)
6868 - name : Autobuild
69- uses : github/codeql-action/autobuild@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
69+ uses : github/codeql-action/autobuild@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
7070
7171 # ℹ️ Command-line programs to run using the OS shell.
7272 # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
7979 # ./location_of_script_within_repo/buildscript.sh
8080
8181 - name : Perform CodeQL Analysis
82- uses : github/codeql-action/analyze@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
82+ uses : github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
8383 with :
8484 category : " /language:${{matrix.language}}"
Original file line number Diff line number Diff line change 1919 ruby : ['3.0', '3.1', '3.2', '3.3']
2020 steps :
2121 - name : Harden Runner
22- uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
22+ uses : step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
2323 with :
2424 disable-sudo : true
2525 egress-policy : block
@@ -35,12 +35,12 @@ jobs:
3535 - name : Checkout code
3636 uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3737 - name : Setup Go
38- uses : actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3 .0
38+ uses : actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4 .0
3939 with :
4040 go-version : ' 1.24'
4141 check-latest : true
4242 - name : Setup Ruby
43- uses : ruby/setup-ruby@6c79f721fa26dd64559c2700086ac852c18e0756 # v1.225 .0
43+ uses : ruby/setup-ruby@ca041f971d66735f3e5ff1e21cc13e2d51e7e535 # v1.233 .0
4444 with :
4545 ruby-version : ${{ matrix.ruby }}
4646 bundler-cache : true
Original file line number Diff line number Diff line change 1717 runs-on : ubuntu-latest
1818 steps :
1919 - name : Harden Runner
20- uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
20+ uses : step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
2121 with :
2222 disable-sudo : true
2323 egress-policy : block
2828 - name : ' Checkout Repository'
2929 uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3030 - name : ' Dependency Review'
31- uses : actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5 .0
31+ uses : actions/dependency-review-action@ce3cf9537a52e8119d91fd484ab5b8a807627bf8 # v4.6 .0
Original file line number Diff line number Diff line change 1616 runs-on : ubuntu-latest
1717 steps :
1818 - name : Harden Runner
19- uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
19+ uses : step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
2020 with :
2121 disable-sudo : true
2222 egress-policy : block
2929 - name : Checkout repo
3030 uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3131 - name : Install Ruby 3.0
32- uses : ruby/setup-ruby@6c79f721fa26dd64559c2700086ac852c18e0756 # v1.225 .0
32+ uses : ruby/setup-ruby@ca041f971d66735f3e5ff1e21cc13e2d51e7e535 # v1.233 .0
3333 with :
3434 ruby-version : " 3.0"
3535 bundler-cache : true
Original file line number Diff line number Diff line change @@ -18,13 +18,13 @@ jobs:
1818
1919 steps :
2020 - name : Harden Runner
21- uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
21+ uses : step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
2222 with :
2323 egress-policy : audit # TODO: change to 'egress-policy: block' after couple of runs
2424 - name : Checkout repo
2525 uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2626 - name : Install Ruby ${{ env.ruby_version }}
27- uses : ruby/setup-ruby@6c79f721fa26dd64559c2700086ac852c18e0756 # v1.225 .0
27+ uses : ruby/setup-ruby@ca041f971d66735f3e5ff1e21cc13e2d51e7e535 # v1.233 .0
2828 with :
2929 ruby-version : ${{ env.ruby_version }}
3030 bundler-cache : true
Original file line number Diff line number Diff line change 2525
2626 steps :
2727 - name : Harden Runner
28- uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
28+ uses : step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
2929 with :
3030 disable-sudo : true
3131 egress-policy : block
6161
6262 # Upload the results to GitHub's code scanning dashboard.
6363 - name : " Upload to code-scanning"
64- uses : github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
64+ uses : github/codeql-action/upload-sarif@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
6565 with :
6666 sarif_file : results.sarif
Original file line number Diff line number Diff line change 3838 runs-on : ${{ matrix.os }}
3939 steps :
4040 - name : Harden Runner
41- uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
41+ uses : step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
4242 with :
4343 disable-sudo : true
4444 egress-policy : block
5151 - name : Checkout repo
5252 uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5353 - name : Install Ruby ${{ matrix.ruby }}
54- uses : ruby/setup-ruby@6c79f721fa26dd64559c2700086ac852c18e0756 # v1.225 .0
54+ uses : ruby/setup-ruby@ca041f971d66735f3e5ff1e21cc13e2d51e7e535 # v1.233 .0
5555 with :
5656 ruby-version : " ${{ matrix.ruby }}"
5757 bundler-cache : true
You can’t perform that action at this time.
0 commit comments