Skip to content

Commit 51e341e

Browse files
committed
feat(ci): Add Automatic weekly CodeQL Pack Updating Job
1 parent 09ad708 commit 51e341e

File tree

1 file changed

+47
-0
lines changed

1 file changed

+47
-0
lines changed

.github/workflows/update-deps.yml

Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
name: Update CodeQL
2+
3+
on:
4+
schedule:
5+
# Every Monday at 14:00 UTC
6+
- cron: "0 14 * * 1"
7+
workflow_dispatch:
8+
9+
jobs:
10+
queries:
11+
runs-on: ubuntu-latest
12+
13+
permissions:
14+
contents: read
15+
packages: write
16+
17+
concurrency:
18+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}-${{ matrix.language }}
19+
cancel-in-progress: true
20+
21+
steps:
22+
- name: "Checkout"
23+
uses: actions/checkout@v4
24+
25+
- name: Setup CodeQL
26+
uses: ./.github/actions/install-codeql
27+
28+
- name: "Update CodeQL Pack Dependencies"
29+
run: |
30+
set -e
31+
echo "Find all directoring with a qlpack.yml file"
32+
for dir in $(find . -name qlpack.yml -exec dirname {} \;); do
33+
echo "Updating dependencies in $dir"
34+
codeql pack upgrade "$dir"
35+
done
36+
37+
- name: Create Pull Request
38+
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
39+
with:
40+
token: ${{ github.token }}
41+
title: "Chore: Update CodeQL Pack Dependencies"
42+
commit-message: "[chore]: Update CodeQL Pack Dependencies"
43+
body: |
44+
This is an automatically created chore to update the CodeQL pack dependencies for all languages.
45+
branch: "chore/update-codeql-pack-dependencies"
46+
labels: "version"
47+
delete-branch: true

0 commit comments

Comments
 (0)