Henry Mercer
9cd802ec12
Give only read-level security-events permission where possible
2025-01-24 13:27:33 +00:00
Josh Soref
1e6d67b138
Give expected-queries-runs permissions
2024-11-06 06:43:49 -05:00
Henry Mercer
12243c759f
Disable database upload in test mode
2024-06-11 19:07:13 +01:00
Angela P Wen
67d5a9a476
PR Checks: Use tools: linked rather than tools: latest
...
Also changes the input and output in the `prepare-test` Action to use `linked`.
2024-05-31 11:49:47 +02:00
Angela P Wen
f421cda8e7
Run integration test PR checks nightly ( #2222 )
...
* Run integration test PR checks nightly
Scheduled for 5AM UTC. This will assist in catching bugs introduced with new runner images.
* Specify generated YAML indentations
For consistency with our non-autogenerated files and GitHub documentation, we should further indent items in lists (`sequence`).
2024-04-04 10:30:18 -07:00
nickfyson
0e9a210226
update workflows to run on all release branches
2023-12-06 15:57:43 +00:00
dependabot[bot]
321d3e057d
Bump the actions group with 1 update
...
Bumps the actions group with 1 update: [actions/checkout](https://github.com/actions/checkout ).
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-09-04 18:00:31 +00:00
Henry Mercer
e85546ccca
Move internal Actions into .github/actions
...
This is a more standard location for these custom Actions.
2023-04-03 18:29:29 +01:00
Angela P Wen
a21bb7f968
Update upload input values and logic ( #1598 )
...
- The `upload` input to the `analyze` Action now accepts the following values:
- `always` is the default value, which uploads the SARIF file to Code Scanning for successful and failed runs.
- `failure-only` is recommended for customers post-processing the SARIF file before uploading it to Code Scanning. This option uploads debugging information to Code Scanning for failed runs to improve the debugging experience.
- `never` avoids uploading the SARIF file to Code Scanning even if the code scanning run fails. This is not recommended for external users since it complicates debugging.
- The legacy `true` and `false` options will be interpreted as `always` and `failure-only` respectively.
---------
Co-authored-by: Henry Mercer <henry.mercer@me.com>
2023-03-23 17:23:25 +00:00
Henry Mercer
e530813ab8
Remove PR checks for v1
2023-01-16 18:49:32 +00:00
Henry Mercer
a190d3876a
Rename TEST_MODE to specific variable for CodeQL Action
...
This allows us to set it automatically in the workflow generator,
simplifying things and reducing the scope for error.
2022-11-16 16:40:30 +00:00
Henry Mercer
96a8424f0c
Don't bypass the toolcache in test mode
2022-08-16 16:18:12 +01:00
Andrew Eisenberg
2a70419420
Revert "Revert "Add capability to filter queries #1098 ""
...
This reverts commit 99d4397d88
2022-06-27 13:13:55 -07:00
Andrew Eisenberg
99d4397d88
Revert "Add capability to filter queries #1098 "
...
https://github.com/github/codeql-action/pull/1098
This reverts commit 777b77840959ca9b59cbeec34d5f0540b280032c
2022-06-21 13:49:33 -07:00
Andrew Eisenberg
7adb33da1d
Ensure there are no duplicates when sending up required checks
...
This breaks the API. Also, fix the checks that had duplicate names.
2022-06-16 20:31:29 -07:00
Andrew Eisenberg
7c412c67ba
Merge branch 'aeisenberg/check-sarif-action' into aeisenberg/remove-queries
2022-06-16 02:42:30 +02:00
Andrew Eisenberg
d7459f0368
Merge branch 'aeisenberg/check-sarif-action' into aeisenberg/remove-queries
2022-06-16 02:22:34 +02:00
Andrew Eisenberg
6834383903
Apply suggestions from code review
...
Co-authored-by: Henry Mercer <henrymercer@github.com>
2022-06-15 16:27:01 -07:00
Andrew Eisenberg
eec34d5f05
Add integration tests for query filters
2022-06-14 14:10:08 -07:00
Andrew Eisenberg
bcb7fad5b3
Add the check-sarif action
...
Allows us to analyze and then check that certain queries were included
in the analysis and others were not.
2022-06-14 11:55:10 -07:00
