From d97e30517b8f13e041af840078cb276be047888e Mon Sep 17 00:00:00 2001 From: Yuriy Andamasov Date: Tue, 14 Jul 2026 18:57:08 +0300 Subject: ci: T9082: onboard CodeQL scanning (#45) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * ci: T9082: onboard CodeQL scanning via central reusable workflow Caller temporarily pinned to the Track-A feature SHA for pre-merge validation; first commit exercises the legacy autobuild path on codeql-action v4. Flipped to @production before merge. 🤖 Generated by [robots](https://vyos.io) * ci: T9082: canary step 2 — deliberate invalid input combo build-mode 'none' + build-command must be rejected by the reusable's validation step before any scanning cost. Reverted in the next commit. 🤖 Generated by [robots](https://vyos.io) * ci: T9082: canary step 3 — final shape (build-mode none) Removes the deliberate invalid combo; c-cpp extraction via build-mode 'none'. Coverage compared against the step-1 autobuild run per the T9082 canary procedure. 🤖 Generated by [robots](https://vyos.io) * ci: T9082: finalize — pin to @production, restore paths filter Pre-merge validation complete (legacy autobuild on v4, validation fail-fast, build-mode none — all green; vyos/.github#155 merged). Fleet-standard caller shape. 🤖 Generated by [robots](https://vyos.io) --- .github/workflows/codeql.yml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 .github/workflows/codeql.yml (limited to '.github') diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..3f878bc --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,31 @@ +name: "Perform CodeQL Analysis" + +on: + push: + branches: + - rolling + paths: + - '**' + - '!.github/**' + - '!**/*.md' + pull_request: + branches: + - rolling + paths: + - '**' + - '!.github/**' + - '!**/*.md' + schedule: + - cron: '28 13 * * 0' + +permissions: + actions: read + contents: read + security-events: write + +jobs: + codeql-analysis-call: + uses: vyos/.github/.github/workflows/codeql-analysis.yml@production + with: + languages: "['c-cpp']" + build-mode: "none" -- cgit v1.2.3