From b271c9292060c754925ecef586fd1d8857818f93 Mon Sep 17 00:00:00 2001 From: PeterGuy326 <47820304+PeterGuy326@users.noreply.github.com> Date: Thu, 10 Sep 2026 15:05:32 +0800 Subject: [PATCH] chore(ci): correct CodeQL action version comments Annotate the existing cdf488f595d80d6e07e03d4674febd5ab45fa938 pin as v4.37.9. The action SHA and executable workflow configuration are unchanged. --- workflow-templates/bytefolk-scorecard.yml | 2 +- workflow-templates/bytefolk-security.yml | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/workflow-templates/bytefolk-scorecard.yml b/workflow-templates/bytefolk-scorecard.yml index 88307ad..b6230b3 100644 --- a/workflow-templates/bytefolk-scorecard.yml +++ b/workflow-templates/bytefolk-scorecard.yml @@ -44,6 +44,6 @@ jobs: retention-days: 14 - name: Upload Scorecard results - uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.4 + uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: sarif_file: results.sarif diff --git a/workflow-templates/bytefolk-security.yml b/workflow-templates/bytefolk-security.yml index 3b69a2b..abc564b 100644 --- a/workflow-templates/bytefolk-security.yml +++ b/workflow-templates/bytefolk-security.yml @@ -54,15 +54,15 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.4 + uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: languages: ${{ matrix.language }} queries: security-extended - name: Autobuild - uses: github/codeql-action/autobuild@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.4 + uses: github/codeql-action/autobuild@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 - name: Analyze - uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.4 + uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: category: /language:${{ matrix.language }}