Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ jobs:

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
uses: github/codeql-action/init@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep all CodeQL action steps on one version

When this workflow runs, init now writes its CodeQL config using v4.37.4, but the later autobuild and analyze steps still use v4.36.2 on lines 63 and 76. CodeQL Action 3.30.4+ explicitly treats mixing versions in one workflow as unsupported and says later CodeQL steps error when they load a config generated by a different init version, so push/PR/scheduled CodeQL scans will fail instead of uploading SARIF; bump the remaining CodeQL Action steps to the same commit as init.

Useful? React with 👍 / 👎.

with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
Expand Down
Loading