Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/dependency-review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ jobs:
runs-on: windows-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
with:
egress-policy: audit

Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/nuget_update.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ jobs:
steps:
# Check out the main repo.
- name: Harden Runner
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
with:
egress-policy: audit

Expand All @@ -44,7 +44,7 @@ jobs:


- name: Cache nuget packages
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7
env:
cache-name: cache-nuget-modules
with:
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/ossar-scan.yml
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ jobs:

steps:
- name: Harden Runner
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
with:
egress-policy: audit

Expand Down Expand Up @@ -68,7 +68,7 @@ jobs:

- name: Download build artifact
if: (steps.skip_check.outputs.should_skip != 'true') && success()
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
id: download_artifact
with:
name: ${{inputs.build_artifact}}-${{matrix.configurations}}
Expand All @@ -94,6 +94,6 @@ jobs:

- name: Upload results to Security tab
if: steps.skip_check.outputs.should_skip != 'true'
uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98
uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13
with:
sarif_file: ${{ steps.ossar.outputs.sarifFile }}
12 changes: 6 additions & 6 deletions .github/workflows/reusable-build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -66,7 +66,7 @@ jobs:

steps:
- name: Harden Runner
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
with:
egress-policy: audit

Expand Down Expand Up @@ -103,18 +103,18 @@ jobs:

- name: Initialize CodeQL
if: inputs.build_codeql == true && steps.skip_check.outputs.should_skip != 'true'
uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98
uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13
with:
languages: 'cpp'

- name: Add MSBuild to PATH
uses: microsoft/setup-msbuild@6fb02220983dee41ce7ae257b6f4d8f9bf5ed4ce
uses: microsoft/setup-msbuild@30375c66a4eea26614e0d39710365f22f8b0af57
with:
msbuild-architecture: x64

- name: Cache chocolatey packages
if: steps.skip_check.outputs.should_skip != 'true'
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7
env:
cache-name: cache-choco-packages
with:
Expand Down Expand Up @@ -159,7 +159,7 @@ jobs:

- name: Cache nuget packages
if: steps.skip_check.outputs.should_skip != 'true'
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7
env:
cache-name: cache-nuget-modules
with:
Expand Down Expand Up @@ -246,4 +246,4 @@ jobs:

- name: Perform CodeQL Analysis
if: inputs.build_codeql == true && steps.skip_check.outputs.should_skip != 'true'
uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98
uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13
14 changes: 7 additions & 7 deletions .github/workflows/reusable-test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -85,7 +85,7 @@ jobs:

steps:
- name: Harden Runner
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
with:
egress-policy: audit

Expand Down Expand Up @@ -135,7 +135,7 @@ jobs:

- name: Download build artifact
if: (steps.skip_check.outputs.should_skip != 'true') && success()
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
id: download_artifact
with:
name: ${{inputs.build_artifact}}-${{matrix.configurations}}
Expand Down Expand Up @@ -231,7 +231,7 @@ jobs:

- name: Upload Report to Codecov attempt 1
if: (steps.skip_check.outputs.should_skip != 'true') && (steps.check_coverage.outputs.files_exists == 'true')
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de
uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2
id: upload_code_coverage_report_1
continue-on-error: true
with:
Expand All @@ -246,7 +246,7 @@ jobs:

- name: Upload Report to Codecov attempt 2
if: (steps.skip_check.outputs.should_skip != 'true') && (steps.upload_code_coverage_report_1.outcome == 'failure')
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de
uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2
id: upload_code_coverage_report_2
continue-on-error: true
with:
Expand All @@ -261,7 +261,7 @@ jobs:

- name: Upload Report to Codecov attempt 3
if: (steps.skip_check.outputs.should_skip != 'true') && (steps.upload_code_coverage_report_2.outcome == 'failure')
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de
uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2
id: upload_code_coverage_report_3
continue-on-error: true
with:
Expand All @@ -276,7 +276,7 @@ jobs:

- name: Upload Report to Codecov attempt 4
if: (steps.skip_check.outputs.should_skip != 'true') && (steps.upload_code_coverage_report_3.outcome == 'failure')
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de
uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2
id: upload_code_coverage_report_4
continue-on-error: true
with:
Expand Down Expand Up @@ -359,7 +359,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
with:
disable-sudo: true
egress-policy: block
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/scorecards-analysis.yml
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ jobs:

steps:
- name: Harden Runner
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
with:
disable-sudo: true
egress-policy: block
Expand Down Expand Up @@ -76,6 +76,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
if: github.ref_name == 'main'
uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98
uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13
with:
sarif_file: results.sarif
Loading