Merge pull request #1609 from go-git/dependabot/github_actions/github/codeql-action-3.29.3

pjbgf · web-flow · commit db22bf1ac608 · 2025-07-22T10:54:07.000+01:00
build: bump github/codeql-action from 3.29.2 to 3.29.3
diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml
@@ -34,7 +34,7 @@ jobs:
        path: ./out/artifacts
    - name: Upload Sarif
      if: always() && steps.build.outcome == 'success'
-     uses: github/codeql-action/upload-sarif@v3.29.2
+     uses: github/codeql-action/upload-sarif@v3.29.3
      with:
       # Path to SARIF file relative to the root of the repository
       sarif_file: cifuzz-sarif/results.sarif
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -32,7 +32,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@dcc1a6637b570d406bec5125dce2e2157d914359 # v2.22.11
+        uses: github/codeql-action/init@eefe1b5db9f28481d2bf2bd096da3873c1cd2a7b # v2.22.11
         with:
           languages: ${{ matrix.language }}
           # xref: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
@@ -43,6 +43,6 @@ jobs:
         run: go build ./...
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@dcc1a6637b570d406bec5125dce2e2157d914359 # v2.22.11
+        uses: github/codeql-action/analyze@eefe1b5db9f28481d2bf2bd096da3873c1cd2a7b # v2.22.11
         with:
           category: "/language:${{matrix.language}}"
