ci: Apply CodeQL workflow fixes #1319
Conversation
There was a problem hiding this comment.
Copilot reviewed 5 out of 9 changed files in this pull request and generated no comments.
Files not reviewed (4)
- .github/workflows/test-performance.yml: Evaluated as low risk
- .github/workflows/test-website-a11y.yml: Evaluated as low risk
- .github/workflows/test-website-links.yml: Evaluated as low risk
- .github/workflows/deploy-website.yml: Evaluated as low risk
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| @@ -60,7 +63,7 @@ | |||
|
|
|||
| - name: Publish to Cloudflare Pages | |||
| id: deploy | |||
| uses: cloudflare/wrangler-action@v3 | |||
| uses: cloudflare/wrangler-action@v3.1.0 | |||
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| @@ -16,7 +16,7 @@ | |||
| runs-on: ubuntu-latest | |||
|
|
|||
| steps: | |||
| - uses: amannn/action-semantic-pull-request@v5 | |||
| - uses: amannn/action-semantic-pull-request@v5.1.0 | |||
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| @@ -29,7 +29,7 @@ | |||
| bot | |||
| dependencies | |||
|
|
|||
| - uses: marocchino/sticky-pull-request-comment@v2 | |||
| - uses: marocchino/sticky-pull-request-comment@v2.1.0 | |||
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| @@ -28,7 +31,7 @@ | |||
| uses: actions/checkout@v4 | |||
|
|
|||
| - name: Setup Ruby | |||
| uses: ruby/setup-ruby@v1 | |||
| uses: ruby/setup-ruby@v1.207.0 | |||
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| @@ -19,7 +19,7 @@ | |||
| timeout-minutes: 10 | |||
|
|
|||
| steps: | |||
| - uses: dessant/lock-threads@v5 | |||
| - uses: dessant/lock-threads@v5.0.1 | |||
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| @@ -27,7 +30,7 @@ | |||
| uses: actions/checkout@v4 | |||
|
|
|||
| - name: Setup Ruby | |||
| uses: ruby/setup-ruby@v1 | |||
| uses: ruby/setup-ruby@v1.207.0 | |||
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium test
| @@ -27,7 +30,7 @@ | |||
| uses: actions/checkout@v4 | |||
|
|
|||
| - name: Setup Ruby | |||
| uses: ruby/setup-ruby@v1 | |||
| uses: ruby/setup-ruby@v1.207.0 | |||
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium test
Done when: