Fix pinning of github actions (#5213)

It is recommended to pin github actions with hash so that an action
is not posing an unknown security risk (as the actions itself is not
written by us).

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
This commit is contained in:
Yong Tang
2022-03-01 11:32:00 -08:00
committed by GitHub
parent 402c08fea0
commit 6c26446bb7
11 changed files with 28 additions and 28 deletions

View File

@@ -20,15 +20,15 @@ jobs:
steps:
- name: Checkout repository
uses: actions/checkout@v2
uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
- name: Initialize CodeQL
uses: github/codeql-action/init@v1
uses: github/codeql-action/init@75f07e7ab2ee63cba88752d8c696324e4df67466
with:
languages: ${{ matrix.language }}
- name: Autobuild
uses: github/codeql-action/autobuild@v1
uses: github/codeql-action/autobuild@75f07e7ab2ee63cba88752d8c696324e4df67466
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v1
uses: github/codeql-action/analyze@75f07e7ab2ee63cba88752d8c696324e4df67466