From c2d339499e0d9adfeb12009a8b8d18e2875d5192 Mon Sep 17 00:00:00 2001 From: Ron Green <11993626+georgettica@users.noreply.github.com> Date: Fri, 3 Dec 2021 00:38:21 +0200 Subject: [PATCH 1/5] test codeql From cafe9310bc811a7150ece4058f4483125563fe47 Mon Sep 17 00:00:00 2001 From: Ron Green <11993626+georgettica@users.noreply.github.com> Date: Fri, 3 Dec 2021 00:41:32 +0200 Subject: [PATCH 2/5] change codeql to maybe work --- .github/workflows/codeql.yml | 49 ++++++++++++------------------------ 1 file changed, 16 insertions(+), 33 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 61eaf5b..efb8345 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -1,45 +1,26 @@ -name: "Code Scanning - Action" +name: "Daily Code Scanning - Action" on: - push: - branches: [main] - pull_request: - branches: [main] schedule: - # ┌───────────── minute (0 - 59) - # │ ┌───────────── hour (0 - 23) - # │ │ ┌───────────── day of the month (1 - 31) - # │ │ │ ┌───────────── month (1 - 12 or JAN-DEC) - # │ │ │ │ ┌───────────── day of the week (0 - 6 or SUN-SAT) - # │ │ │ │ │ - # │ │ │ │ │ - # │ │ │ │ │ - # * * * * * - - cron: '0 9 * * *' + - cron: '0 0 * * 0' jobs: CodeQL-Build: - # CodeQL runs on ubuntu-latest, windows-latest, and macos-latest - runs-on: ubuntu-latest - permissions: - # required for all workflows - security-events: write + # strategy: + # fail-fast: false - # only required for workflows in private repositories - actions: read - contents: read + runs-on: ubuntu-latest steps: - - name: Checkout repository - uses: actions/checkout@v2 + - name: Checkout repository + uses: actions/checkout@v2 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v1 + # with: + # languages: javascript - # Initializes the CodeQL tools for scanning. - - name: Initialize CodeQL - uses: github/codeql-action/init@v1 - # Override language selection by uncommenting this and choosing your languages - # with: - # languages: go, javascript, csharp, python, cpp, java # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below). @@ -57,5 +38,7 @@ jobs: # make bootstrap # make release - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v1 + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v1 + From 56f880590856cb482cddf790e6a302586f2c643c Mon Sep 17 00:00:00 2001 From: Ron Green <11993626+georgettica@users.noreply.github.com> Date: Fri, 3 Dec 2021 00:44:03 +0200 Subject: [PATCH 3/5] format issue --- .github/workflows/codeql.yml | 8 +------- 1 file changed, 1 insertion(+), 7 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index efb8345..74836b0 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -6,15 +6,9 @@ on: jobs: CodeQL-Build: - - # strategy: - # fail-fast: false - runs-on: ubuntu-latest - steps: - - name: Checkout repository - uses: actions/checkout@v2 + - uses: actions/checkout@v2 - name: Initialize CodeQL uses: github/codeql-action/init@v1 From 29cb9588c1648d4dafa06ab73f3342a5eb289778 Mon Sep 17 00:00:00 2001 From: Ron Green <11993626+georgettica@users.noreply.github.com> Date: Fri, 3 Dec 2021 00:44:59 +0200 Subject: [PATCH 4/5] Update codeql.yml --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 74836b0..69700dd 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -18,8 +18,8 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below). - - name: Autobuild - uses: github/codeql-action/autobuild@v1 + - name: Autobuild + uses: github/codeql-action/autobuild@v1 # ℹ️ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl From a4de35c98babded047bfc9326688def5fa96674e Mon Sep 17 00:00:00 2001 From: Ron Green <11993626+georgettica@users.noreply.github.com> Date: Fri, 3 Dec 2021 00:47:20 +0200 Subject: [PATCH 5/5] allow running manually --- .github/workflows/codeql.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 69700dd..99cdc82 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -1,6 +1,7 @@ name: "Daily Code Scanning - Action" on: + workflow_dispatch: schedule: - cron: '0 0 * * 0'