From 3142b6e46399e66d9a2524e928c815df0385b018 Mon Sep 17 00:00:00 2001 From: Andrew Berezovskyi Date: Tue, 19 Nov 2024 21:21:33 +0100 Subject: [PATCH] build: fix codeql config (#241) --- .github/workflows/codeql.yml | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index cc9b716..41c6ad3 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -49,14 +49,14 @@ jobs: with: fetch-depth: 2 # https://learn.microsoft.com/en-us/dotnet/devops/dotnet-secure-github-action - - run: git checkout HEAD^2 - if: ${{ github.event_name == 'pull_request' }} + # git checkout HEAD^2 is no longer necessary. Please remove this step as Code Scanning recommends analyzing the merge commit for best results. + # - run: git checkout HEAD^2 + # if: ${{ github.event_name == 'pull_request' }} # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL uses: github/codeql-action/init@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4 with: - working-directory: ./OSLC4Net_SDK languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. # By default, queries listed here will override any specified in a config file. @@ -82,5 +82,4 @@ jobs: - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4 with: - working-directory: ./OSLC4Net_SDK category: "/language:${{matrix.language}}"