From 47df92c4d45c810bc77c605d65ad5388fba7f910 Mon Sep 17 00:00:00 2001 From: zerosnacks Date: Thu, 18 Sep 2025 18:04:29 +0200 Subject: [PATCH] merge in codeql.yml as mark as requirement for ci-success --- .github/workflows/ci.yml | 33 ++++++++++++++++++++++++ .github/workflows/codeql.yml | 49 ------------------------------------ 2 files changed, 33 insertions(+), 49 deletions(-) delete mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1fd725d..6b99902 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -148,6 +148,38 @@ jobs: permissions: contents: read + codeql: + name: Analyze (${{ matrix.language }}) + runs-on: ubuntu-latest + permissions: + security-events: write + actions: read + contents: read + + strategy: + fail-fast: false + matrix: + include: + - language: actions + build-mode: none + + steps: + - name: Checkout repository + uses: actions/checkout@v5 + with: + persist-credentials: false + + - name: Initialize CodeQL + uses: github/codeql-action/init@v3 + with: + languages: ${{ matrix.language }} + build-mode: ${{ matrix.build-mode }} + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v3 + with: + category: "/language:${{matrix.language}}" + ci-success: runs-on: ubuntu-latest if: always() @@ -159,6 +191,7 @@ jobs: - docs - fmt - deny + - codeql timeout-minutes: 30 steps: - name: Decide whether the needed jobs succeeded or failed diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml deleted file mode 100644 index d60004f..0000000 --- a/.github/workflows/codeql.yml +++ /dev/null @@ -1,49 +0,0 @@ -name: CodeQL - -permissions: {} - -on: - push: - branches: ["main"] - pull_request: - branches: ["main"] - schedule: - - cron: "0 0 * * *" - workflow_dispatch: - -concurrency: - group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} - cancel-in-progress: true - -jobs: - analyze: - name: Analyze (${{ matrix.language }}) - runs-on: ubuntu-latest - permissions: - security-events: write - actions: read - contents: read - - strategy: - fail-fast: false - matrix: - include: - - language: actions - build-mode: none - - steps: - - name: Checkout repository - uses: actions/checkout@v5 - with: - persist-credentials: false - - - name: Initialize CodeQL - uses: github/codeql-action/init@v3 - with: - languages: ${{ matrix.language }} - build-mode: ${{ matrix.build-mode }} - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 - with: - category: "/language:${{matrix.language}}"