diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 75369d9ef..aeac047a9 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -348,7 +348,7 @@ jobs: # SECURITY RESULTS INTEGRATION # Uploads scan results to GitHub Security tab for centralized management - name: Upload Trivy scan results - uses: github/codeql-action/upload-sarif@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3 + uses: github/codeql-action/upload-sarif@5d5cd550d3e189c569da8f16ea8de2d821c9bf7a # v3 with: sarif_file: trivy-results.sarif diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index c2919a573..958d89081 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -103,7 +103,7 @@ jobs: # CODEQL INITIALIZATION # Configures language-specific analysis parameters - name: Initialize CodeQL - uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3 + uses: github/codeql-action/init@5d5cd550d3e189c569da8f16ea8de2d821c9bf7a # v3 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -111,7 +111,7 @@ jobs: # SECURITY ANALYSIS EXECUTION # Performs comprehensive static analysis with categorized results - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3 + uses: github/codeql-action/analyze@5d5cd550d3e189c569da8f16ea8de2d821c9bf7a # v3 with: category: /language:${{matrix.language}}