dependabot[bot]
6aeccbef59
Bump github/codeql-action from 2 to 3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-05-10 22:47:49 +01:00
dependabot[bot]
c5478eabb2
Bump actions/checkout from 3 to 4 ( #1155 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-14 18:43:56 +00:00
Brian Goff
d66366ba96
codeql: Add explicit permissions
...
Codeql requires write access to security-events, but our default action
token (rightly) only has read permissions.
This adds the explicit request for write access.
Signed-off-by: Brian Goff <cpuguy83@gmail.com >
2022-10-10 17:29:32 +00:00
dependabot[bot]
db7f53c1ca
Bump actions/checkout from 2 to 3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-09-12 17:33:34 +00:00
Brian Goff
6198b02423
Only run codeql on pushes to master, not pr's
...
These are extremely slow and probably very expensive for someone.
We don't need these running on PR's which have constant pushes, rebases,
etc.
The activity on the repo is slow enough we can fix-up things after
codeql runs on master.
Signed-off-by: Brian Goff <cpuguy83@gmail.com >
2022-08-31 19:56:04 +00:00
dependabot[bot]
de4fe42586
Bump github/codeql-action from 1 to 2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-08-31 19:42:26 +00:00
Brian Goff
433e0bbd20
Add github actions
...
Signed-off-by: Brian Goff <cpuguy83@gmail.com >
2022-08-31 00:58:51 +00:00
Chris Aniszczyk
8affa1c42a
Add CodeQL Security Scanning
...
Signed-off-by: Chris Aniszczyk <caniszczyk@gmail.com >
Signed-off-by: Sargun Dhillon <sargun@sargun.me >
2020-12-14 20:13:40 -08:00
