Felix Fontein
a9e892952d
[stable-10] Adjust YAML files ( #10233 ) ( #10244 )
...
Adjust YAML files (#10233 )
Adjust YAML files.
(cherry picked from commit eaa5e07b28
2025-06-15 10:02:03 +02:00
patchback[bot]
2fabb55a4d
[PR #10025/a3b8eed0 backport][stable-10] fixed hidden warnings from extra tests - batch 1 ( #10062 )
...
EOL CI / EOL Sanity (Ⓐ2.15) (push) Has been cancelled
EOL CI / EOL Units (Ⓐ2.15+py2.7) (push) Has been cancelled
EOL CI / EOL Units (Ⓐ2.15+py3.10) (push) Has been cancelled
EOL CI / EOL Units (Ⓐ2.15+py3.5) (push) Has been cancelled
EOL CI / EOL I (Ⓐ2.15+alpine3+py:azp/posix/1/) (push) Has been cancelled
EOL CI / EOL I (Ⓐ2.15+alpine3+py:azp/posix/2/) (push) Has been cancelled
EOL CI / EOL I (Ⓐ2.15+alpine3+py:azp/posix/3/) (push) Has been cancelled
EOL CI / EOL I (Ⓐ2.15+fedora37+py:azp/posix/1/) (push) Has been cancelled
EOL CI / EOL I (Ⓐ2.15+fedora37+py:azp/posix/2/) (push) Has been cancelled
EOL CI / EOL I (Ⓐ2.15+fedora37+py:azp/posix/3/) (push) Has been cancelled
nox / Run extra sanity tests (push) Has been cancelled
fixed hidden warnings from extra tests - batch 1 (#10025 )
(cherry picked from commit a3b8eed0c4
2025-04-23 22:25:51 +02:00
patchback[bot]
8f76c847fe
[PR #9250/f6dae1fc backport][stable-10] CI: Fix some issues pointed out by zizmor ( #9253 )
...
CI: Fix some issues pointed out by zizmor (#9250 )
Fix some issues pointed out by zizmor.
(cherry picked from commit f6dae1fc4d
2024-12-14 15:17:05 +01:00
dependabot[bot]
097f08608f
Bump github/codeql-action from 2 to 3 ( #7739 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-18 19:21:18 +01:00
dependabot[bot]
bc9dca4bc8
build(deps): bump actions/checkout from 3 to 4 ( #7237 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-12 06:41:43 +02:00
Felix Fontein
3bf3d6bff4
Allow to trigger manual code scanning run.
2022-11-22 12:51:25 +01:00
Felix Fontein
f2a420ead5
Another try: fix languages to check. ( #5587 )
2022-11-22 12:50:21 +01:00
Felix Fontein
6a6bbb6577
Clean up code-scanning workflow. ( #5546 )
2022-11-15 08:13:00 +01:00
Felix Fontein
1ab2a5f1bc
Add default license header to files which have no copyright or license header yet ( #5074 )
...
* Add default license header to files which have no copyright or license header yet.
* yml extension should have been xml...
2022-08-05 14:03:38 +02:00
nathannaveen
dc4cdb1a58
chore: Set permissions for GitHub actions ( #4641 )
...
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com>
2022-05-08 08:57:53 +02:00
dependabot[bot]
720e0544f9
Bump github/codeql-action from 1 to 2 ( #4639 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-06 17:56:45 +02:00
dependabot[bot]
cf87944333
Bump actions/checkout from 2 to 3 ( #4638 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-06 17:55:59 +02:00
John R Barker
c5f0c34190
codeql-analysis.yml cron
2020-07-06 20:24:45 +01:00
John R Barker
24c66fcc43
Create codeql-analysis.yml
2020-07-06 20:19:31 +01:00
