Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/codeql-analysis.yml
Original file line number Diff line number Diff line change
Expand Up @@ -47,4 +47,4 @@ jobs:
uses: github/codeql-action/autobuild@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2.28.1

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2.28.1
uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep CodeQL actions on the same version

This step now runs analyze from CodeQL Action v4.37.3 while the init and autobuild steps above are still pinned to v2.28.1. CodeQL validates that all github/codeql-action/* steps in the same workflow use one version and emits InconsistentActionVersion/configuration-version errors when they differ, so the CodeQL job on pushes and PRs to master can fail before uploading results. Update init/autobuild to the same v4 SHA, or keep analyze on v2 until all three are bumped together.

Useful? React with 👍 / 👎.

Loading