Bug Fix: Use the right org/repo for the codeql-bundle

vegastrike · Nov 25, 2023 · 10bc5af · 10bc5af
1 parent b54ba9a
commit 10bc5af
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -28,8 +28,9 @@ jobs:
       - name: Download benchmark bundle
         env:
            GH_TOKEN: ${{ github.token }}
+        # download the latest version
         run: |
-           gh release download -R octo-org/codeql-bundle --pattern 'codeql-bundle.tar.gz'
+           gh release download -R github/codeql-action --pattern 'codeql-bundle.tar.gz'
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL

diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml
@@ -30,8 +30,9 @@ jobs:
       - name: Download benchmark bundle
         env:
            GH_TOKEN: ${{ github.token }}
+        # download the latest version
         run: |
-           gh release download -R octo-org/codeql-bundle --pattern 'codeql-bundle.tar.gz'
+           gh release download -R github/codeql-action --pattern 'codeql-bundle.tar.gz'
 
       - name: "Run analysis"
         uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 #v2.3.1