From 0ca9c4e72156e5b4299b8e689041082b6176cfda Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Tue, 4 Aug 2026 18:05:12 +0900 Subject: [PATCH] ci(scheduled-security-scan): align codeql-action refs to v4.37.4 Dependabot bumped only the upload-sarif step to v4.37.4 (#719), leaving init/analyze at v4.37.0 in the same workflow. The contract test test_codeql_action_steps_use_one_version_per_workflow requires a single github/codeql-action ref per workflow file, so bump init/analyze to the same f205ea1c (v4.37.4) pin. Co-Authored-By: Claude Fable 5 --- .github/workflows/scheduled-security-scan.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/scheduled-security-scan.yml b/.github/workflows/scheduled-security-scan.yml index 8ecb5185b..6b19cf257 100644 --- a/.github/workflows/scheduled-security-scan.yml +++ b/.github/workflows/scheduled-security-scan.yml @@ -90,13 +90,13 @@ jobs: with: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 + uses: github/codeql-action/init@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis continue-on-error: true - uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 + uses: github/codeql-action/analyze@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 with: category: "/language:${{ matrix.language }}-scheduled"