Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -73,6 +73,6 @@ jobs:
# ./location_of_script_within_repo/buildscript.sh

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep CodeQL action steps on the same ref

This workflow now runs codeql-action/init and autobuild at v4.36.2 but analyze at v4.37.3. In this exact CodeQL workflow, init generates the configuration that analyze later reads, and the CodeQL Action changelog states that mixing different CodeQL Action versions in one workflow is unsupported and may error when a later step loads config from another version. Please bump all github/codeql-action/* steps to the same SHA/version, or leave analyze on v4.36.2.

Useful? React with 👍 / 👎.

with:
category: "/language:${{matrix.language}}"
Loading