codeql-action/pr-checks
Paolo Tranquilli d0aab9fc20 Fix sync recipes and add base justfile
Both the justfile and the pre-commit configuration for the `pr-check`
sync were broken:
* justfiles run recipes one line at a time in a fresh shell, so the venv
  activation was not working
* the pre-commit config was relying on an installed `ruamel.yaml`
  pakcage, but the default one installable via `apt` on Ubuntu 24.04 is
  old and generates different output (with formatting differences).

Now:
* the venv dance is put in a separate bash script
* both just and pre-commit will use that same script, so both problems
  will be fixed

As a bonus, a root `justfile` is added exposing the `update-pr-checks`
recipes plus a `build` one. Running `just` without arguments will also
now call the default `sync` recipes that will call both of the above.
2025-02-19 16:51:46 +01:00
..
checks Update generated workflow source 2025-02-17 19:17:28 +00:00
.gitignore Add .gitignore to ignore env folder in pr-checks directory 2024-12-13 16:46:10 +00:00
justfile Fix sync recipes and add base justfile 2025-02-19 16:51:46 +01:00
readme.md Update PR checks readme instructions 2024-12-11 11:27:03 +00:00
sync.py Give only read-level security-events permission where possible 2025-01-24 13:27:33 +00:00
sync.sh Fix sync recipes and add base justfile 2025-02-19 16:51:46 +01:00

PR Checks

This folder contains the workflow generator that must be run in order to create the workflows used by the CodeQL Action CI. Workflows must be recreated after any change to one of the files in this directory.

Updating workflows

  1. Install https://github.com/casey/just by whichever way you prefer.
  2. Run just update-pr-checks in your terminal.

If you don't want to intall just

Manually run each step in the justfile.