From c5e4981c700deae1a069d882751b1d9885a1b664 Mon Sep 17 00:00:00 2001 From: LifeOmic SCM <76973249+loscm@users.noreply.github.com> Date: Wed, 6 Jul 2022 00:14:28 -0400 Subject: [PATCH] AUTOGENERATED: Add or Update code scanning workflow. --- ...ng-v4.yml => code-scanning-2022-06-29.yml} | 19 ++++++++++++------- 1 file changed, 12 insertions(+), 7 deletions(-) rename .github/workflows/{code-scanning-v4.yml => code-scanning-2022-06-29.yml} (85%) diff --git a/.github/workflows/code-scanning-v4.yml b/.github/workflows/code-scanning-2022-06-29.yml similarity index 85% rename from .github/workflows/code-scanning-v4.yml rename to .github/workflows/code-scanning-2022-06-29.yml index 16ccdaa..62b38e0 100644 --- a/.github/workflows/code-scanning-v4.yml +++ b/.github/workflows/code-scanning-2022-06-29.yml @@ -1,11 +1,13 @@ -# This workflow is inherited from our internal .github repo at https://github.com/lifeomic/.github/blob/master/workflow-templates/code-scanning-2021-06-08.yml +# This workflow is inherited from our internal .github repo at https://github.com/lifeomic/.github/blob/master/workflow-templates/code-scanning-2022-06-29.yml # Setting up this workflow on the repository will perform a static scan for security issues using GitHub Code Scanning. # Any findings for a repository can be found under the `Security` tab -> `Code Scanning Alerts` name: "CodeQL" on: push: - branches: [master] + branches: + - main + - master paths-ignore: - test - tests @@ -14,7 +16,9 @@ on: - '**/*.test.js' - '**/*.test.ts' pull_request: - branches: [master] + branches: + - main + - master paths-ignore: - test - tests @@ -34,7 +38,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v2 + uses: actions/checkout@v3 with: # We must fetch at least the immediate parents so that if this is # a pull request then we can checkout the head. @@ -42,7 +46,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v1 + uses: github/codeql-action/init@v2 with: config-file: lifeomic/.github/config-files/codeql-config.yml@master # uses our config file from the lifeomic/.github repo queries: +security-extended # This will run all queries at https://github.com/github/codeql/:language/ql/src/codeql-suites/:language-security-extended.qls @@ -50,7 +54,8 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, it should be removed and replaced with custom build steps. - name: Autobuild - uses: github/codeql-action/autobuild@v1 + uses: github/codeql-action/autobuild@v2 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v1 + uses: github/codeql-action/analyze@v2 +