3030
3131 # Initializes the CodeQL tools for scanning.
3232 - name : Initialize CodeQL
33- uses : github/codeql-action/init@v2
33+ uses : github/codeql-action/init@v3
3434 with :
3535 languages : ' c-cpp'
3636 # If you wish to specify custom queries, you can do so here or in a config file.
@@ -44,20 +44,10 @@ jobs:
4444 # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
4545 # If this step fails, then you should remove it and run the build manually (see below)
4646 - name : Autobuild
47- uses : github/codeql-action/autobuild@v2
48-
49- # ℹ️ Command-line programs to run using the OS shell.
50- # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
51-
52- # If the Autobuild fails above, remove it and uncomment the following three lines.
53- # modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
54-
55- # - run: |
56- # echo "Run, Build Application using script"
57- # ./location_of_script_within_repo/buildscript.sh
47+ uses : github/codeql-action/autobuild@v3
5848
5949 - name : Perform CodeQL Analysis
60- uses : github/codeql-action/analyze@v2
50+ uses : github/codeql-action/analyze@v3
6151 with :
6252 category : " /language:c-cpp"
6353
@@ -73,13 +63,13 @@ jobs:
7363 uses : actions/checkout@v3
7464
7565 - name : flawfinder_scan
76- uses : david-a-wheeler/flawfinder@8e4a779ad59dbfaee5da586aa9210853b701959c
66+ uses : david-a-wheeler/flawfinder@2.0.19
7767 with :
7868 arguments : ' --sarif ./'
7969 output : ' flawfinder_results.sarif'
8070
8171 - name : Upload analysis results to GitHub Security tab
82- uses : github/codeql-action/upload-sarif@v2
72+ uses : github/codeql-action/upload-sarif@v3
8373 with :
8474 sarif_file : ${{github.workspace}}/flawfinder_results.sarif
8575
0 commit comments