-
Notifications
You must be signed in to change notification settings - Fork 1.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
QL: update codeql-action in QL-for-QL #10012
Conversation
425c38e
to
32e3ec0
Compare
00448bb
to
a72a49b
Compare
f4604ce
to
28087a5
Compare
28087a5
to
b3adb62
Compare
@@ -17,7 +17,7 @@ jobs: | |||
- uses: actions/checkout@v3 | |||
- name: Find codeql | |||
id: find-codeql | |||
uses: github/codeql-action/init@aa93aea877e5fb8841bcb1193f672abf6e9f2980 | |||
uses: github/codeql-action/init@71a8b35ff4c80fcfcd05bc1cd932fe3c08f943ca |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could we point this at a tag to make similar updates simpler.
I.e. create a tag for 71a8b35ff4c80fcfcd05bc1cd932fe3c08f943ca on gitub/codeql-action titled v2-with-ql-language
, and use that instead of the explicit sha.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I prefer pinned commits.
In the beginning we had it point to a branch, but then I broke the workflow by updating the branch (the workflow needed updating).
After that I've preferred using a commit SHA.
The previous version was from back in March.
The updated version of
codeql-action
is the latestmain
+ a commit that addsql
as a supported language.I had to update how we do the config file to support the changes that has happened in
codeql-action
.