Commit graph

29 commits

Author SHA1 Message Date
Kovid Goyal
3b0938e878
Run govulncheck on the binary and remove upload of SARIF to github as github doesnt like the SARIF govulncheck produces 2025-09-24 13:12:00 +05:30
Kovid Goyal
4ffacbbe80
Another try at running govulncheck 2025-09-24 12:50:06 +05:30
Kovid Goyal
1672110854
Turn off CodeQL TRAP caching
It was using up the GitHub actions caching quota of 10GB
2025-09-19 22:53:14 +05:30
Kovid Goyal
77fbd5beba
Use CodeQL on github actions 2025-09-17 07:47:34 +05:30
Kovid Goyal
d647e21779
Use the bundle for CodeQL builds
Speeds up the dependency fetch and hopefully fixes the failure on macOS
2025-09-16 07:36:00 +05:30
Kovid Goyal
96253f4798
Also run CodeQL for C on macOS to improve coverage 2025-09-16 07:21:48 +05:30
Kovid Goyal
1d37ef84ce
Run CodeQL analysis for different languages in parallel 2025-09-16 07:11:13 +05:30
dependabot[bot]
04a8a60a87
Bump the actions group with 4 updates
Bumps the actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python), [actions/setup-go](https://github.com/actions/setup-go) and [actions/cache](https://github.com/actions/cache).


Updates `actions/checkout` from 3 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v5)

Updates `actions/setup-python` from 4 to 6
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v6)

Updates `actions/setup-go` from 3 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v3...v6)

Updates `actions/cache` from 3 to 4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/cache
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-15 06:26:51 +00:00
Kovid Goyal
edfda1e7af
Remove deprecated option from CodeQL setup 2025-04-20 15:51:29 +05:30
Kovid Goyal
9cea3fbcb8
Enable CodeQL for Go 2025-04-20 15:44:36 +05:30
Kovid Goyal
afe5877e6a
Fix indentation in codeql yml file 2025-04-14 10:21:10 +05:30
Kovid Goyal
5382fa8692
Bump version of CodeQL actions
Version 2 is deprecated.

Fixes #8537
Fixes #8536
2025-04-14 08:09:31 +05:30
Kovid Goyal
5a7abd6214
CodeQL does not work for Go code 2023-02-14 11:15:44 +05:30
pagedown
dcddaf33e0
... 2023-02-11 20:43:42 +08:00
pagedown
d1e54a1d3b
CI: Bump versions of the deprecated github actions to the latest 2023-02-11 20:33:29 +08:00
pagedown
3c7df680cf
Get go version from go.mod
No need to update multiple places when bumping the go version.
2023-02-11 20:33:08 +08:00
Kovid Goyal
27ae9104ac
Bump required Go version to 1.20
This allows us to use the stdlib for ECDH crypto used by remote control.
Fixes #5976
2023-02-03 09:32:56 +05:30
Kovid Goyal
77a3916f6f
We need go >= 1.19 2023-01-05 19:41:42 +05:30
Kovid Goyal
d60ecfa8a6
Install go 1.18 for codeql build 2022-11-14 20:35:41 +05:30
Alex
13539bd8c6 build: harden codeql-analysis.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
2022-09-23 22:14:16 +02:00
Kovid Goyal
a4f1caeb4e
Missed a couple of actions invocations 2022-04-01 07:31:10 +05:30
pagedown
693fc0f0c7
CI: Disable codeql auto install python dependencies 2022-02-23 21:28:29 +08:00
Kovid Goyal
89a93af1d5
GitHub says checkouting out HEAD^2 for merge commits is no longer needed for CodeQL 2021-12-01 20:20:58 +05:30
Kovid Goyal
a95a1f1158
Specify languages for CodeQL 2021-10-21 19:43:52 +05:30
Kovid Goyal
d506fa0565
Use python3 in code analysis build step 2020-07-07 08:41:20 +05:30
Kovid Goyal
de1a0d48a6
Use ci script to build kitty for code scanning 2020-07-07 08:35:04 +05:30
Kovid Goyal
a20e5fefd3
... 2020-07-07 08:27:10 +05:30
Kovid Goyal
44558560f9
Dont use autobuild for code scanning 2020-07-07 08:24:37 +05:30
Kovid Goyal
677f154f03
Create codeql-analysis.yml
Enable GitHub code scanning for vulnerabilities
2020-07-07 08:21:14 +05:30