Commit Graph

29 Commits

Author SHA1 Message Date
Kovid Goyal
3b0938e878 Run govulncheck on the binary and remove upload of SARIF to github as github doesnt like the SARIF govulncheck produces 2025-09-24 13:12:00 +05:30
Kovid Goyal
4ffacbbe80 Another try at running govulncheck 2025-09-24 12:50:06 +05:30
Kovid Goyal
1672110854 Turn off CodeQL TRAP caching
It was using up the GitHub actions caching quota of 10GB
2025-09-19 22:53:14 +05:30
Kovid Goyal
77fbd5beba Use CodeQL on github actions 2025-09-17 07:47:34 +05:30
Kovid Goyal
d647e21779 Use the bundle for CodeQL builds
Speeds up the dependency fetch and hopefully fixes the failure on macOS
2025-09-16 07:36:00 +05:30
Kovid Goyal
96253f4798 Also run CodeQL for C on macOS to improve coverage 2025-09-16 07:21:48 +05:30
Kovid Goyal
1d37ef84ce Run CodeQL analysis for different languages in parallel 2025-09-16 07:11:13 +05:30
dependabot[bot]
04a8a60a87 Bump the actions group with 4 updates
Bumps the actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python), [actions/setup-go](https://github.com/actions/setup-go) and [actions/cache](https://github.com/actions/cache).


Updates `actions/checkout` from 3 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v5)

Updates `actions/setup-python` from 4 to 6
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v6)

Updates `actions/setup-go` from 3 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v3...v6)

Updates `actions/cache` from 3 to 4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/cache
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-15 06:26:51 +00:00
Kovid Goyal
edfda1e7af Remove deprecated option from CodeQL setup 2025-04-20 15:51:29 +05:30
Kovid Goyal
9cea3fbcb8 Enable CodeQL for Go 2025-04-20 15:44:36 +05:30
Kovid Goyal
afe5877e6a Fix indentation in codeql yml file 2025-04-14 10:21:10 +05:30
Kovid Goyal
5382fa8692 Bump version of CodeQL actions
Version 2 is deprecated.

Fixes #8537
Fixes #8536
2025-04-14 08:09:31 +05:30
Kovid Goyal
5a7abd6214 CodeQL does not work for Go code 2023-02-14 11:15:44 +05:30
pagedown
dcddaf33e0 ... 2023-02-11 20:43:42 +08:00
pagedown
d1e54a1d3b CI: Bump versions of the deprecated github actions to the latest 2023-02-11 20:33:29 +08:00
pagedown
3c7df680cf Get go version from go.mod
No need to update multiple places when bumping the go version.
2023-02-11 20:33:08 +08:00
Kovid Goyal
27ae9104ac Bump required Go version to 1.20
This allows us to use the stdlib for ECDH crypto used by remote control.
Fixes #5976
2023-02-03 09:32:56 +05:30
Kovid Goyal
77a3916f6f We need go >= 1.19 2023-01-05 19:41:42 +05:30
Kovid Goyal
d60ecfa8a6 Install go 1.18 for codeql build 2022-11-14 20:35:41 +05:30
Alex
13539bd8c6 build: harden codeql-analysis.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
2022-09-23 22:14:16 +02:00
Kovid Goyal
a4f1caeb4e Missed a couple of actions invocations 2022-04-01 07:31:10 +05:30
pagedown
693fc0f0c7 CI: Disable codeql auto install python dependencies 2022-02-23 21:28:29 +08:00
Kovid Goyal
89a93af1d5 GitHub says checkouting out HEAD^2 for merge commits is no longer needed for CodeQL 2021-12-01 20:20:58 +05:30
Kovid Goyal
a95a1f1158 Specify languages for CodeQL 2021-10-21 19:43:52 +05:30
Kovid Goyal
d506fa0565 Use python3 in code analysis build step 2020-07-07 08:41:20 +05:30
Kovid Goyal
de1a0d48a6 Use ci script to build kitty for code scanning 2020-07-07 08:35:04 +05:30
Kovid Goyal
a20e5fefd3 ... 2020-07-07 08:27:10 +05:30
Kovid Goyal
44558560f9 Dont use autobuild for code scanning 2020-07-07 08:24:37 +05:30
Kovid Goyal
677f154f03 Create codeql-analysis.yml
Enable GitHub code scanning for vulnerabilities
2020-07-07 08:21:14 +05:30