search

onflow / atree

Atree provides scalable arrays and scalable ordered maps.
https://onflow.org
Apache License 2.0
40 stars 16 forks source link

Pin dependencies in CodeQL workflow #362

Closed fxamacker closed 6 months ago

fxamacker commented 9 months ago

Issue To Be Solved

Dependencies are not pinned in the CodeQL workflow.

Having unpinned dependencies can reduce the project's quality score computed by 3rd parties (e.g. OpenSSF Scorecard).

Suggested Solution

Pin dependencies in CodeQL workflow.

While at it, also bump version of Go from 1.19 to 1.20.