From 1da30998ad146698c57eec799400b2a015567c5f Mon Sep 17 00:00:00 2001 From: Robert Schardt Date: Tue, 1 Oct 2024 12:07:37 +0200 Subject: [PATCH] Fix: Set specific checkout hash and add shell to composite action --- .github/actions/install-dependencies-action/action.yml | 2 +- .github/workflows/codeql.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/actions/install-dependencies-action/action.yml b/.github/actions/install-dependencies-action/action.yml index 8cdb620..5d09f6b 100644 --- a/.github/actions/install-dependencies-action/action.yml +++ b/.github/actions/install-dependencies-action/action.yml @@ -3,8 +3,8 @@ description: 'Install dependencies for Boreas' runs: using: "composite" steps: - - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 - name: Build Boreas + shell: bash run: | apt-get update && apt-get install --no-install-recommends --no-install-suggests -y \ build-essential \ diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 83bf734..e0c8c61 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -25,8 +25,8 @@ jobs: language: [ 'c' ] steps: - - uses: actions/checkout@v4 - - uses: ./.github/actions/install-dependencies-action/ + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + - uses: ./.github/actions/install-dependencies-action # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL