From f5dc1c1ad32d1df08ceb40f590d1b1952dbb4a2d Mon Sep 17 00:00:00 2001
From: Valery Kharseko <vharseko@3a-systems.ru>
Date: Wed, 23 Sep 2026 12:50:09 +0000
Subject: [PATCH] Add dependabot config and pin GitHub Actions to a commit SHA (#1073)
---
.github/workflows/codeql.yml | 10 +++++-----
1 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 3dff709..210a692 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -80,12 +80,12 @@
steps:
- name: Checkout repository
- uses: actions/checkout@v7
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
submodules: recursive
- name: Initialize CodeQL
- uses: github/codeql-action/init@v4
+ uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
@@ -120,13 +120,13 @@
# --- Java manual build (only used if the java entry is set to 'manual')
# - name: Set up JDK 11
# if: matrix.language == 'java-kotlin'
- # uses: actions/setup-java@v5
+ # uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
# with:
# java-version: '11'
# distribution: 'zulu'
# - name: Cache Maven packages
# if: matrix.language == 'java-kotlin'
- # uses: actions/cache@v6
+ # uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
# with:
# path: ~/.m2/repository
# key: ${{ runner.os }}-m2-repository-${{ hashFiles('**/pom.xml') }}
@@ -139,6 +139,6 @@
# ---------------------------------------------------------------------
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@v4
+ uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
with:
category: "/language:${{ matrix.language }}"
--
Gitblit v1.10.0