updated workflows

.github/workflows/build.yml

@@ -6,15 +6,18 @@ on:
 jobs:
  build:
  runs-on: ubuntu-latest
+ permissions: 
+ actions: read
+ contents: write
  strategy:
  matrix:
  node-version: [14.x]
  steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@v4
  with:
  submodules: recursive
  - name: Use Node.js ${{ matrix.node-version }}
- uses: actions/setup-node@v3
+ uses: actions/setup-node@v4
  with:
  node-version: ${{ matrix.node-version }}
  cache: "yarn"

.github/workflows/codeql-analysis.yml

@@ -13,25 +13,28 @@ jobs:
  analyze:
  name: Analyze
  runs-on: ubuntu-20.04
-
+ permissions:
+ actions: read
+ contents: read
+ security-events: write
  steps:
  - name: Checkout repository
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
  with:
  # We must fetch at least the immediate parents so that if this is
  # a pull request then we can checkout the head.
  fetch-depth: 2
 
  # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL
- uses: github/codeql-action/init@v1
+ uses: github/codeql-action/init@v3
  with:
  languages: javascript
 
  # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
  # If this step fails, then you should remove it and run the build manually (see below)
  - name: Autobuild
- uses: github/codeql-action/autobuild@v1
+ uses: github/codeql-action/autobuild@v3
 
  # ℹ️ Command-line programs to run using the OS shell.
  # 📚 https://git.io/JvXDl
@@ -45,4 +48,4 @@ jobs:
  # make release
 
  - name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@v1
+ uses: github/codeql-action/analyze@v3