github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2025-12-27 09:40:17 +08:00
Code Issues Packages Projects Releases Wiki Activity
6,790 Commits 297 Branches 500 Tags
codeql-bundle-v2.21.4
Commit Graph

902 Commits

Author SHA1 Message Date
Henry Mercer
3b34c672ca Merge branch 'main' into henrymercer/add-permissions 2025-01-24 13:40:54 +00:00
Henry Mercer
9cd802ec12 Give only read-level security-events permission where possible 2025-01-24 13:27:33 +00:00
Henry Mercer
d39065943f Add missing permissions 2025-01-24 13:21:05 +00:00
Stephan Brandauer
d7f39764f6 permissions block in query-filters.yml 2025-01-24 12:12:00 +01:00
Owen Mansel-Chan
0d043c929c Update to rc2 2025-01-17 09:20:52 +00:00
Henry Mercer
bd76a92ebe PR checks: Remove code for unsupported versions 2025-01-15 17:50:02 +00:00
Henry Mercer
048b0a2fc9 Remove Node 16 compilation PR check 2025-01-15 13:59:30 +00:00
Angela P Wen
c050c40379 Stop updating releases/v2 branch 
CodeQL Action v2 is now deprecated: https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/ and this PR will prevent the automation from backporting new changes to the `v2` branch when we replease.
 2025-01-10 10:59:20 -08:00
dependabot[bot]
d43af810ec build(deps): bump actions/create-github-app-token in the actions group 
Bumps the actions group with 1 update: [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `actions/create-github-app-token` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](5d869da34e...c1a285145b)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-23 17:33:15 +00:00
Henry Mercer
695f3263e3 Merge branch 'main' into go/1.24 2024-12-19 16:14:19 +00:00
Michael B. Gale
7b4c9fef7d Go: Use 1.24rc1 in PR checks 2024-12-17 15:50:18 +00:00
Andrew Eisenberg
beed6ff2e9 Change codeql version used in test 2024-12-16 18:08:38 -08:00
Andrew Eisenberg
5f0a4d3e67 Bump the minimum supported version of CodeQL to 2.15.5 2024-12-16 15:39:28 -08:00
Michael B. Gale
38fd34c412 Fail start-proxy PR check if outputs are not set 2024-12-13 17:05:58 +00:00
Michael B. Gale
0de662d785 Print proxy step outputs 2024-12-13 16:55:46 +00:00
Michael B. Gale
5a8fab3748 Fix typo'd input name 2024-12-13 16:53:17 +00:00
Michael B. Gale
706ef5896a Add basic PR check for testing start-proxy 2024-12-13 16:45:33 +00:00
Andrew Eisenberg
f124ad0e7e Adds an environment for creating releases 
The `app-id` is only available in the `Automation` environment.
 2024-12-12 12:54:15 -08:00
Andrew Eisenberg
9cfbef4bda Merge pull request #2644 from github/aeisenberg/use-app-token-for-release 
Use an app token for triggering a release
 2024-12-12 09:22:34 -08:00
Andrew Eisenberg
9a8645df7a Use an app token for triggering a release 
We need to do this because using a default token will not
recursively trigger a new workflow run.
 2024-12-12 09:10:14 -08:00
Fotis Koutoulakis (@NlightNFotis)
51e71f81a0 docs: add documentation for the reason why we need to have a setup step for the container 2024-12-09 18:59:37 +00:00
Fotis Koutoulakis (@NlightNFotis)
3951a82275 Merge branch 'main' into NlightNFotis/detect_use_proxy_when_streaming 2024-12-09 18:51:25 +00:00
Fotis Koutoulakis (@NlightNFotis)
c901aeec28 ci: remove dns for container running proxy steps (experimental) 2024-12-09 18:39:53 +00:00
Fotis Koutoulakis (@NlightNFotis)
9c48c8bf18 ci: add capability to handle container initialisation steps to sync.py 2024-12-05 15:32:36 +00:00
Angela P Wen
0bb80075c0 Delete legacy artifact PR check 2024-12-04 12:05:41 -08:00
Angela P Wen
25488cc9b0 Remove deprecated CODEQL_ACTION_ARTIFACT_V4_UPGRADE env var 2024-12-04 12:05:25 -08:00
Fotis Koutoulakis (@NlightNFotis)
78be2f1333 ci: add configuration tto run proxy with zstd package to test streaming with proxy 2024-12-04 19:29:23 +00:00
Henry Mercer
d57328a17b Run PR check on Windows too 2024-12-03 18:05:53 +00:00
Henry Mercer
f8ccf38bb2 PR check: Check toolcache empty at start 2024-12-03 18:05:53 +00:00
Henry Mercer
8c0517fff8 PR check: Ensure bundle added to toolcache 2024-12-03 18:05:53 +00:00
Henry Mercer
028cece17f Add PR check 2024-12-02 18:23:50 +00:00
Josh Soref
1c83cd1292 Upgrade actions/upload-artifact to v4 2024-11-12 20:50:14 -05:00
Henry Mercer
8a5e9bca59 Use gzip bundles in Windows PR checks 2024-11-11 17:16:51 +00:00
Henry Mercer
faa963470d Merge branch 'main' into aeisenberg/macos-13-runners 2024-11-08 17:56:50 +00:00
Henry Mercer
abbbbf5f6d Fix export file baseline test 
Only set up Swift on macOS, since we only support Swift analysis on macOS.
 2024-11-08 17:36:34 +00:00
Andrew Eisenberg
1489c9c992 Exclude Swift on macos for version 2.14.6 2024-11-07 16:06:21 -08:00
Andrew Eisenberg
34919cb664 Update codeql.yml workflow 2024-11-06 15:15:23 -08:00
Andrew Eisenberg
45a6057506 Move to macos-13 runners 
Macos-12 runners are deprecated and are refusing to run.
 2024-11-06 15:15:22 -08:00
Josh Soref
3b7b85fbe8 Conditionally clear runner cache 
This allows runners that don't have the cache to run these workflows.
 2024-11-06 06:44:03 -05:00
Josh Soref
688ea5370d Fix publish-immutable-action version 2024-11-06 06:43:56 -05:00
Josh Soref
1e6d67b138 Give expected-queries-runs permissions 2024-11-06 06:43:49 -05:00
Josh Soref
d5e73848c4 Strip trailing whitespace generated by ruamel-yaml 2024-11-06 06:43:41 -05:00
Josh Soref
756aa649df spelling: macos 
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
 2024-11-06 06:43:41 -05:00
Josh Soref
16e8ccc657 spelling: in case 
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
 2024-11-04 13:36:03 -05:00
Henry Mercer
26077f3119 Remove fallback to gzip 
Data shows it is unneeded
 2024-11-01 15:29:16 +00:00
Andrew Eisenberg
a5eda49bf5 Merge branch 'main' into aeisenberg/publish-immutable 2024-10-22 12:07:50 -07:00
Andrew Eisenberg
0d1eb88b60 Remove ESLint from required checks 
Dependabot does not upload eslint alerts, so the check is never
created.
 2024-10-21 15:50:17 -07:00
Josh Soref
95cae075a7 Add permissions to pr-checks workflow 2024-10-20 18:12:52 -04:00
Henry Mercer
c4700633cb Merge pull request #2549 from github/henrymercer/remove-support-2.13.5 
Bump the minimum supported version of CodeQL to 2.14.6
 2024-10-16 18:17:45 +01:00
Henry Mercer
66ebfdfab6 Update non-generated tests 2024-10-16 10:52:55 +01:00