Commit graph

9 commits

Author SHA1 Message Date
dependabot[bot]
d1995025b4 Bump github/codeql-action from 1.0.29 to 1.0.30
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.29 to 1.0.30.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](384cfc42b2...8b37404d56)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-31 19:56:33 +00:00
dependabot[bot]
d1ac6a12bd Bump github/codeql-action from 1.0.27 to 1.0.29
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.27 to 1.0.29.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](cd783c8a29...384cfc42b2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-24 07:48:39 +00:00
dependabot[bot]
5f8dc7a943 Bump github/codeql-action from 1.0.26 to 1.0.27
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.26 to 1.0.27.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](5f53256358...cd783c8a29)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-17 09:02:44 +00:00
dependabot[bot]
aebb75c079 Bump github/codeql-action from 1.0.24 to 1.0.26
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.24 to 1.0.26.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](e095058bfa...5f53256358)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-12-26 22:00:57 +00:00
Topi Miettinen
4bac5c6d71 CI: pin GitHub actions to SHAs
Pinning actions to SHAs instead of versions improves the supply chain
security:
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
2021-12-26 21:52:05 +00:00
Reiner Herrmann
1a559b92b8 CI: sync codeql config with Github's template
Fixes: #3986
2021-02-14 18:20:38 +01:00
Fred Barclay
ad0b7fc886 Housekeeping: strip extra whitespace
Just `find . -not \( -name .git -prune -o -name *.AppImage -prune \) -type f -print0 | xargs -0 perl -pi -e 's/ +$//'`
and filter to avoid unwanted changes (especially .md files)
2021-02-08 17:24:28 -06:00
rusty-snake
4b0b7ec216
Update build.yml (#3779)
* Update build.yml

Currently we run all actions for all commits. This is not resource friendly. Let's tweak this a bit.

This commit adds support for "skip ci" tags (i.e. if the head commit contains [s k i p   c i] (w/o the extra spaces used to escape here), no jobs are executed.
In addition are all commits which modify non-code files (e.g. README) only excluded.

Furthermore we should not run cppcheck and scan-build if only profiles are changed and sort.py need only to be execute if profiles are changed.

* Create sort.yml

* Update build.yml

profile-sort is now in sort.yml

* Update sort.yml

fix syntax

* Update codeql-analysis.yml

    paths-ignore:
      - CONTRIBUTING.md
      - README
      - README.md  
      - RELNOTES
      - SECURITY.md
      - 'etc/**'

* Create build-extra.yml

* Update build.yml

* Update build-extra.yml
2020-11-29 14:04:22 +00:00
Reiner Herrmann
51f070ef2f
Create codeql-analysis.yml 2020-10-01 09:17:18 +00:00