diff options
author | Reiner Herrmann <reiner@reiner-h.de> | 2021-02-14 18:20:38 +0100 |
---|---|---|
committer | Reiner Herrmann <reiner@reiner-h.de> | 2021-02-14 18:20:38 +0100 |
commit | 1a559b92b88ea93fb59e8140cef6a9d468b34109 (patch) | |
tree | ef2b46d057c9aa6f00deddd3108b8d578f8a6413 /.github | |
parent | disable .ssh and .gnupg in kdiff3 profile (diff) | |
download | firejail-1a559b92b88ea93fb59e8140cef6a9d468b34109.tar.gz firejail-1a559b92b88ea93fb59e8140cef6a9d468b34109.tar.zst firejail-1a559b92b88ea93fb59e8140cef6a9d468b34109.zip |
CI: sync codeql config with Github's template
Fixes: #3986
Diffstat (limited to '.github')
-rw-r--r-- | .github/workflows/codeql-analysis.yml | 22 |
1 files changed, 6 insertions, 16 deletions
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index d974d650e..4476963b5 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml | |||
@@ -7,7 +7,7 @@ name: "CodeQL" | |||
7 | 7 | ||
8 | on: | 8 | on: |
9 | push: | 9 | push: |
10 | branches: [master] | 10 | branches: [ master ] |
11 | paths-ignore: | 11 | paths-ignore: |
12 | - CONTRIBUTING.md | 12 | - CONTRIBUTING.md |
13 | - README | 13 | - README |
@@ -17,7 +17,7 @@ on: | |||
17 | - 'etc/**' | 17 | - 'etc/**' |
18 | pull_request: | 18 | pull_request: |
19 | # The branches below must be a subset of the branches above | 19 | # The branches below must be a subset of the branches above |
20 | branches: [master] | 20 | branches: [ master ] |
21 | paths-ignore: | 21 | paths-ignore: |
22 | - CONTRIBUTING.md | 22 | - CONTRIBUTING.md |
23 | - README | 23 | - README |
@@ -36,24 +36,14 @@ jobs: | |||
36 | strategy: | 36 | strategy: |
37 | fail-fast: false | 37 | fail-fast: false |
38 | matrix: | 38 | matrix: |
39 | # Override automatic language detection by changing the below list | 39 | language: [ 'cpp', 'python' ] |
40 | # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python'] | 40 | # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ] |
41 | language: ['cpp', 'python'] | 41 | # Learn more: |
42 | # Learn more... | 42 | # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed |
43 | # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection | ||
44 | 43 | ||
45 | steps: | 44 | steps: |
46 | - name: Checkout repository | 45 | - name: Checkout repository |
47 | uses: actions/checkout@v2 | 46 | uses: actions/checkout@v2 |
48 | with: | ||
49 | # We must fetch at least the immediate parents so that if this is | ||
50 | # a pull request then we can checkout the head. | ||
51 | fetch-depth: 2 | ||
52 | |||
53 | # If this run was triggered by a pull request event, then checkout | ||
54 | # the head of the pull request instead of the merge commit. | ||
55 | - run: git checkout HEAD^2 | ||
56 | if: ${{ github.event_name == 'pull_request' }} | ||
57 | 47 | ||
58 | # Initializes the CodeQL tools for scanning. | 48 | # Initializes the CodeQL tools for scanning. |
59 | - name: Initialize CodeQL | 49 | - name: Initialize CodeQL |