diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 1f231eca..bb32e492 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -348,7 +348,7 @@ jobs: # SECURITY RESULTS INTEGRATION # Uploads scan results to GitHub Security tab for centralized management - name: Upload Trivy scan results - uses: github/codeql-action/upload-sarif@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3 + uses: github/codeql-action/upload-sarif@96f518a34f7a870018057716cc4d7a5c014bd61c # v3 with: sarif_file: trivy-results.sarif diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 9c259756..5bf52584 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -103,7 +103,7 @@ jobs: # CODEQL INITIALIZATION # Configures language-specific analysis parameters - name: Initialize CodeQL - uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3 + uses: github/codeql-action/init@96f518a34f7a870018057716cc4d7a5c014bd61c # v3 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -111,7 +111,7 @@ jobs: # SECURITY ANALYSIS EXECUTION # Performs comprehensive static analysis with categorized results - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3 + uses: github/codeql-action/analyze@96f518a34f7a870018057716cc4d7a5c014bd61c # v3 with: category: /language:${{matrix.language}}