From 9fccb15dc69faf8e0b7ce3d05701675a51d780d9 Mon Sep 17 00:00:00 2001
From: Daniel Winsor <danwin@microsoft.com>
Date: Thu, 21 Oct 2021 16:18:11 -0700
Subject: [PATCH] Updated action to meet guidelines

---
 code-scanning/msvc.yml | 30 ++++++++++++++++--------------
 1 file changed, 16 insertions(+), 14 deletions(-)

diff --git a/code-scanning/msvc.yml b/code-scanning/msvc.yml
index 85cb475..c6bb29f 100644
--- a/code-scanning/msvc.yml
+++ b/code-scanning/msvc.yml
@@ -21,21 +21,23 @@ env:
   build: '${{ github.workspace }}/build'
 
 jobs:
-  build:
-    steps:
-      # Configure project with CMake
-      - name: Configure CMake
-        uses: lukka/run-cmake@v3
-        with:
-          buildDirectory: ${{ env.build }}
-          # Build is not require unless generated source files are used
-          buildWithCMake: false
-          cmakeGenerator: 'VS16Win64'
-          cmakeListsTxtPath: ${{ github.workspace }}/CMakeLists.txt
+  analyze:
+    name: Analyze
+    runs-on: windows-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v2
+
+      - name: Configure CMake
+        run: cmake -B ${{ env.build }}
+
+      # Build is not required unless generated source files are used
+      # - name: Build CMake
+      #   run: cmake --build ${{ env.build }}
 
-      # Run Microsoft Visual C++ code analysis
       - name: Initialize MSVC Code Analysis
-        uses: microsoft/msvc-code-analysis-action
+        uses: microsoft/msvc-code-analysis-action@502db28262ba134c9a621d5a509b9f7e696c99b6
         # Provide a unique ID to access the sarif output path
         id: run-analysis
         with:
@@ -44,7 +46,7 @@ jobs:
           ruleset: NativeRecommendRules.ruleset
 
       # Upload SARIF file to GitHub Code Scanning Alerts
-      - name: Upload SARIF to Github
+      - name: Upload SARIF to GitHub
         uses: github/codeql-action/upload-sarif@v1
         with:
           sarif_file: ${{ steps.run-analysis.outputs.sarif }}