From 68bca01d19c0320a7e397d1a879e2ef0751cd295 Mon Sep 17 00:00:00 2001 From: Grant Birkinbine Date: Thu, 20 Mar 2025 13:17:10 -0700 Subject: [PATCH 1/3] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 64bc0c3..f0a21f0 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -33,6 +33,7 @@ jobs: uses: github/codeql-action/init@v3 with: languages: ${{ matrix.language }} + queries: security-extended # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) From 18424d2d434c207060a9099fcc34557407e6828c Mon Sep 17 00:00:00 2001 From: Grant Birkinbine Date: Thu, 20 Mar 2025 13:18:47 -0700 Subject: [PATCH 2/3] Add 'actions' language to CodeQL analysis --- .github/workflows/codeql-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index f0a21f0..28396e4 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -22,7 +22,7 @@ jobs: strategy: fail-fast: false matrix: - language: [ 'ruby' ] + language: [ 'ruby', 'actions' ] steps: - name: checkout From 6ce2825ed230ec3229d2cf9fe727ed61ee2f74d8 Mon Sep 17 00:00:00 2001 From: Grant Birkinbine Date: Thu, 20 Mar 2025 14:33:30 -0700 Subject: [PATCH 3/3] Delete .github/workflows/codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 47 --------------------------- 1 file changed, 47 deletions(-) delete mode 100644 .github/workflows/codeql-analysis.yml diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml deleted file mode 100644 index 28396e4..0000000 --- a/.github/workflows/codeql-analysis.yml +++ /dev/null @@ -1,47 +0,0 @@ -name: CodeQL - -on: - push: - branches: [ main ] - pull_request: - # The branches below must be a subset of the branches above - branches: [ main ] - schedule: - - cron: '25 4 * * 5' - -permissions: - actions: read - contents: read - security-events: write - -jobs: - analyze: - name: Analyze - runs-on: ubuntu-latest - - strategy: - fail-fast: false - matrix: - language: [ 'ruby', 'actions' ] - - steps: - - name: checkout - uses: actions/checkout@v4 - - # Initializes the CodeQL tools for scanning. - - name: Initialize CodeQL - uses: github/codeql-action/init@v3 - with: - languages: ${{ matrix.language }} - queries: security-extended - - # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). - # If this step fails, then you should remove it and run the build manually (see below) - - name: Autobuild - uses: github/codeql-action/autobuild@v3 - #- run: | - # make bootstrap - # make release - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3