From f998bd500f671b8d3775b776eda142354e98ea89 Mon Sep 17 00:00:00 2001 From: rmoff Date: Wed, 15 Apr 2026 18:14:30 +0100 Subject: [PATCH] Build: Fix codeql-action version comment to match pinned SHA The pinned SHA c10b8064 is v4.35.1, not the rolling v4 tag. Update the comment to match, fixing the zizmor ref-version-mismatch finding. --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 81bc6b16f82e..fe0459aeb76f 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -46,11 +46,11 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4 + uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 with: languages: actions - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4 + uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 with: category: "/language:actions"