This is an automated email from the ASF dual-hosted git repository.

steveloughran pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/hadoop-cloudstore.git


The following commit(s) were added to refs/heads/main by this push:
     new 1b5704d  HADOOP-19880. Zizmor advised codeql sha/version mismatch
1b5704d is described below

commit 1b5704dd4fda47a4e965328f9c8cafcfbc25ba2d
Author: Steve Loughran <[email protected]>
AuthorDate: Wed Jun 3 12:07:59 2026 +0100

    HADOOP-19880. Zizmor advised codeql sha/version mismatch
---
 .github/workflows/codeql.yml    | 4 ++--
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4c833d3..01da155 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -63,7 +63,7 @@ jobs:
         distribution: 'temurin'
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa 
# v4
+      uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa 
# v4.36.0
       with:
         languages: java-kotlin
         # Default + security-extended queries. Add security-and-quality if
@@ -74,6 +74,6 @@ jobs:
       run: mvn -B -DskipTests package
 
     - name: Perform CodeQL analysis
-      uses: 
github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
+      uses: 
github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
       with:
         category: "/language:java-kotlin"
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index dbee428..5e8fd5a 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -79,6 +79,6 @@ jobs:
         retention-days: 5
 
     - name: Upload to code-scanning dashboard
-      uses: 
github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
+      uses: 
github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # 
v4.36.0
       with:
         sarif_file: results.sarif


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to