This is an automated email from the ASF dual-hosted git repository.
steveloughran pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/hadoop-cloudstore.git
The following commit(s) were added to refs/heads/main by this push:
new 1b5704d HADOOP-19880. Zizmor advised codeql sha/version mismatch
1b5704d is described below
commit 1b5704dd4fda47a4e965328f9c8cafcfbc25ba2d
Author: Steve Loughran <[email protected]>
AuthorDate: Wed Jun 3 12:07:59 2026 +0100
HADOOP-19880. Zizmor advised codeql sha/version mismatch
---
.github/workflows/codeql.yml | 4 ++--
.github/workflows/scorecard.yml | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4c833d3..01da155 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -63,7 +63,7 @@ jobs:
distribution: 'temurin'
- name: Initialize CodeQL
- uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa
# v4
+ uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa
# v4.36.0
with:
languages: java-kotlin
# Default + security-extended queries. Add security-and-quality if
@@ -74,6 +74,6 @@ jobs:
run: mvn -B -DskipTests package
- name: Perform CodeQL analysis
- uses:
github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
+ uses:
github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
with:
category: "/language:java-kotlin"
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index dbee428..5e8fd5a 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -79,6 +79,6 @@ jobs:
retention-days: 5
- name: Upload to code-scanning dashboard
- uses:
github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
+ uses:
github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa #
v4.36.0
with:
sarif_file: results.sarif
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]