diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 75369d9ef..6e984bed3 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -348,7 +348,7 @@ jobs: # SECURITY RESULTS INTEGRATION # Uploads scan results to GitHub Security tab for centralized management - name: Upload Trivy scan results - uses: github/codeql-action/upload-sarif@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3 + uses: github/codeql-action/upload-sarif@c3d42c5d08633d8b33635fbd94b000a0e2585b3c # v3 with: sarif_file: trivy-results.sarif diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index c2919a573..7d8ad14cb 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -103,7 +103,7 @@ jobs: # CODEQL INITIALIZATION # Configures language-specific analysis parameters - name: Initialize CodeQL - uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3 + uses: github/codeql-action/init@c3d42c5d08633d8b33635fbd94b000a0e2585b3c # v3 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -111,7 +111,7 @@ jobs: # SECURITY ANALYSIS EXECUTION # Performs comprehensive static analysis with categorized results - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3 + uses: github/codeql-action/analyze@c3d42c5d08633d8b33635fbd94b000a0e2585b3c # v3 with: category: /language:${{matrix.language}}