diff options
| author | Yuriy Andamasov <yuriy@vyos.io> | 2026-07-14 18:57:08 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-07-14 18:57:08 +0300 |
| commit | d97e30517b8f13e041af840078cb276be047888e (patch) | |
| tree | 83abe6afe74d40a46b7e810c18e6a39cc6f50308 /.github | |
| parent | d8ba8e14d3e93aec2225cf97ab935b6197cae90b (diff) | |
| download | ipaddrcheck-rolling.tar.gz ipaddrcheck-rolling.zip | |
ci: T9082: onboard CodeQL scanning (#45)rolling
* ci: T9082: onboard CodeQL scanning via central reusable workflow
Caller temporarily pinned to the Track-A feature SHA for pre-merge
validation; first commit exercises the legacy autobuild path on
codeql-action v4. Flipped to @production before merge.
🤖 Generated by [robots](https://vyos.io)
* ci: T9082: canary step 2 — deliberate invalid input combo
build-mode 'none' + build-command must be rejected by the reusable's
validation step before any scanning cost. Reverted in the next commit.
🤖 Generated by [robots](https://vyos.io)
* ci: T9082: canary step 3 — final shape (build-mode none)
Removes the deliberate invalid combo; c-cpp extraction via
build-mode 'none'. Coverage compared against the step-1 autobuild run
per the T9082 canary procedure.
🤖 Generated by [robots](https://vyos.io)
* ci: T9082: finalize — pin to @production, restore paths filter
Pre-merge validation complete (legacy autobuild on v4, validation
fail-fast, build-mode none — all green; vyos/.github#155 merged).
Fleet-standard caller shape.
🤖 Generated by [robots](https://vyos.io)
Diffstat (limited to '.github')
| -rw-r--r-- | .github/workflows/codeql.yml | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..3f878bc --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,31 @@ +name: "Perform CodeQL Analysis" + +on: + push: + branches: + - rolling + paths: + - '**' + - '!.github/**' + - '!**/*.md' + pull_request: + branches: + - rolling + paths: + - '**' + - '!.github/**' + - '!**/*.md' + schedule: + - cron: '28 13 * * 0' + +permissions: + actions: read + contents: read + security-events: write + +jobs: + codeql-analysis-call: + uses: vyos/.github/.github/workflows/codeql-analysis.yml@production + with: + languages: "['c-cpp']" + build-mode: "none" |