@@ -12,25 +12,29 @@ jobs:
12
12
# CodeQL runs on ubuntu-latest and windows-latest
13
13
runs-on :ubuntu-latest
14
14
15
+ permissions :
16
+ contents :read
17
+ security-events :write
18
+
15
19
steps :
16
20
-name :Checkout repository
17
- uses :actions/checkout@v2
21
+ uses :actions/checkout@v4
18
22
with :
19
23
# We must fetch at least the immediate parents so that if this is
20
24
# a pull request then we can checkout the head.
21
25
fetch-depth :2
22
26
23
27
# Initializes the CodeQL tools for scanning.
24
28
-name :Initialize CodeQL
25
- uses :github/codeql-action/init@v2
29
+ uses :github/codeql-action/init@v3
26
30
# Override language selection by uncommenting this and choosing your languages
27
31
# with:
28
32
# languages: go, javascript, csharp, python, cpp, java
29
33
30
34
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
31
35
# If this step fails, then you should remove it and run the build manually (see below)
32
36
-name :Autobuild
33
- uses :github/codeql-action/autobuild@v2
37
+ uses :github/codeql-action/autobuild@v3
34
38
35
39
# ℹ️ Command-line programs to run using the OS shell.
36
40
# 📚 https://git.io/JvXDl
44
48
# make release
45
49
46
50
-name :Perform CodeQL Analysis
47
- uses :github/codeql-action/analyze@v2
51
+ uses :github/codeql-action/analyze@v3