@@ -2,6 +2,8 @@ name: CodeQL
|
2 | 2 | |
3 | 3 | on: |
4 | 4 | workflow_dispatch: |
| 5 | +schedule: |
| 6 | + - cron: "0 6 * * *" |
5 | 7 | |
6 | 8 | concurrency: |
7 | 9 | group: codeql-${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }} |
|
70 | 72 | config_file: "" |
71 | 73 | steps: |
72 | 74 | - name: Checkout |
73 | | -uses: actions/checkout@v6 |
| 75 | +uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 |
74 | 76 | with: |
75 | 77 | submodules: false |
76 | 78 | |
@@ -83,13 +85,13 @@ jobs:
|
83 | 85 | |
84 | 86 | - name: Setup Python |
85 | 87 | if: matrix.needs_python |
86 | | -uses: actions/setup-python@v6 |
| 88 | +uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 |
87 | 89 | with: |
88 | 90 | python-version: "3.12" |
89 | 91 | |
90 | 92 | - name: Setup Java |
91 | 93 | if: matrix.needs_java |
92 | | -uses: actions/setup-java@v5 |
| 94 | +uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5 |
93 | 95 | with: |
94 | 96 | distribution: temurin |
95 | 97 | java-version: "21" |
@@ -103,15 +105,15 @@ jobs:
|
103 | 105 | swift --version |
104 | 106 | |
105 | 107 | - name: Initialize CodeQL |
106 | | -uses: github/codeql-action/init@v4 |
| 108 | +uses: github/codeql-action/init@b25d0ebf40e5b63ee81e1bd6e5d2a12b7c2aeb61 # v4 |
107 | 109 | with: |
108 | 110 | languages: ${{ matrix.language }} |
109 | 111 | queries: security-and-quality |
110 | 112 | config-file: ${{ matrix.config_file || '' }} |
111 | 113 | |
112 | 114 | - name: Autobuild |
113 | 115 | if: matrix.needs_autobuild |
114 | | -uses: github/codeql-action/autobuild@v4 |
| 116 | +uses: github/codeql-action/autobuild@b25d0ebf40e5b63ee81e1bd6e5d2a12b7c2aeb61 # v4 |
115 | 117 | |
116 | 118 | - name: Build Android for CodeQL |
117 | 119 | if: matrix.language == 'java-kotlin' |
@@ -132,6 +134,6 @@ jobs:
|
132 | 134 | CODE_SIGNING_ALLOWED=NO |
133 | 135 | |
134 | 136 | - name: Analyze |
135 | | -uses: github/codeql-action/analyze@v4 |
| 137 | +uses: github/codeql-action/analyze@b25d0ebf40e5b63ee81e1bd6e5d2a12b7c2aeb61 # v4 |
136 | 138 | with: |
137 | 139 | category: "/language:${{ matrix.language }}" |
