summaryrefslogtreecommitdiffstatshomepage
path: root/.github/workflows/codeql.yml
AgeCommit message (Collapse)AuthorFiles
2026-04-17ci: bump the github-actions group across 2 directories with 2 updatesdependabot[bot]1
Bumps the github-actions group with 1 update in the / directory: [github/codeql-action](https://github.com/github/codeql-action). Bumps the github-actions group with 1 update in the /.github/actions/cache directory: [actions/cache](https://github.com/actions/cache). Updates `github/codeql-action` from 4 to 4.35.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4...v4.35.1) Updates `actions/cache` from 5 to 5.0.4 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v5...v5.0.4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/cache dependency-version: 5.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
2026-03-09ci: set default permissions for workflowsDaniel Hast1
The default workflow permissions are overly broad; setting permissions explicitly at the workflow level ensures excessive permissions are not unintentionally granted to jobs. For details, see: https://docs.zizmor.sh/audits/#excessive-permissions
2026-03-09ci: don't persist git credentials on diskDaniel Hast1
Set `persist-credentials: false` for all uses of `actions/checkout`. This prevents git credentials from being stored on disk, and fixes the following Zizmor audit: https://docs.zizmor.sh/audits/#artipacked
2025-11-21ci: bump actions/checkout from 5 to 6dependabot[bot]1
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2025-10-08ci: bump github/codeql-action from 3 to 4 (#36082)dependabot[bot]1
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3...v4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-11ci: bump actions/checkout from 4 to 5 #35305dependabot[bot]1
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-27ci: add workflow_dispatch event to testing workflowsdundargoc1
This allows us to easily test the release branch if needed.
2024-03-16ci: simplify concurrency stringdundargoc1
`github.ref` is now defined for both pull requests and pushes, meaning that it can be used to simplify the concurrency group. `cancel-in-progress` is set to true only if the trigger is a pull request, as we don't want master runs to cancel each other out.
2023-12-14ci: bump github/codeql-action from 2 to 3dependabot[bot]1
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v2...v3)
2023-12-09ci: refactor CI filesdundargoc1
Mostly rename file and variable names to be more consistent. This makes it easier to locate them in the "Actions" tab on github.
2023-12-01ci: create setup actiondundargoc1
This deduplicates common operations.
2023-09-10ci(codeql): add concurrency to cancel unnecessary jobs earlydundargoc1
2023-09-04ci: bump actions/checkout from 3 to 4dependabot[bot]1
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2023-08-13ci: run codeql on pull requests #24545Justin M. Keyes1
Also use cache to save 1 minute.
2023-02-13ci: replace cmake script with bash script (#22246)dundargoc1
Bash has better error handling than cmake, and seem overall slightly more suited to scripting than cmake.
2023-02-12ci: install dependencies with a single script (#22241)dundargoc1
It's easier if the os-specific installations are done by the script itself
2023-02-12ci: remove unnecessary matrix from codeql workflow (#22239)dundargoc1
2023-02-12ci: inline external environment scripts (#22237)dundargoc1
Scripts that define the build itself shouldn't be external as they lead to hard to find bugs.
2022-12-05ci: use shell script to deduplicate workflow (#21079)dundargoc1
2022-12-01ci: rename workflow files to be simpler and more consistent (#21253)dundargoc1
Copyright © 2025 - 2026 Wayne Cole. WTFPL. Attribution appreciated. No warranty. Not liable for bodily damages.