Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ jobs:

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep the CodeQL steps on the same action version

This workflow now initializes CodeQL with v4.37.3 while autobuild and analyze still run v4.36.2 below; in the CodeQL workflow inspected here, those later steps load the configuration written by init, and the CodeQL Action changelog states that mixing different CodeQL Action versions in one workflow is unsupported and that non-init steps error when they load config generated by a different init version. As a result, the scheduled/push/PR CodeQL run can fail after this bump unless the other github/codeql-action/* steps are bumped to the same ref too.

Useful? React with 👍 / 👎.

with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
Expand Down
Loading