29 Commits

Author SHA1 Message Date
Kovid Goyal
3b0938e878 Run govulncheck on the binary and remove upload of SARIF to github as github doesnt like the SARIF govulncheck produces 2025-09-24 13:12:00 +05:30
Kovid Goyal
4ffacbbe80 Another try at running govulncheck 2025-09-24 12:50:06 +05:30
Kovid Goyal
1672110854 Turn off CodeQL TRAP caching
It was using up the GitHub actions caching quota of 10GB
2025-09-19 22:53:14 +05:30
Kovid Goyal
77fbd5beba Use CodeQL on github actions 2025-09-17 07:47:34 +05:30
Kovid Goyal
d647e21779 Use the bundle for CodeQL builds
Speeds up the dependency fetch and hopefully fixes the failure on macOS
2025-09-16 07:36:00 +05:30
Kovid Goyal
96253f4798 Also run CodeQL for C on macOS to improve coverage 2025-09-16 07:21:48 +05:30
Kovid Goyal
1d37ef84ce Run CodeQL analysis for different languages in parallel 2025-09-16 07:11:13 +05:30
dependabot[bot]
04a8a60a87 Bump the actions group with 4 updates
Bumps the actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python), [actions/setup-go](https://github.com/actions/setup-go) and [actions/cache](https://github.com/actions/cache).


Updates `actions/checkout` from 3 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v5)

Updates `actions/setup-python` from 4 to 6
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v6)

Updates `actions/setup-go` from 3 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v3...v6)

Updates `actions/cache` from 3 to 4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/cache
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-15 06:26:51 +00:00
Kovid Goyal
edfda1e7af Remove deprecated option from CodeQL setup 2025-04-20 15:51:29 +05:30
Kovid Goyal
9cea3fbcb8 Enable CodeQL for Go 2025-04-20 15:44:36 +05:30
Kovid Goyal
afe5877e6a Fix indentation in codeql yml file 2025-04-14 10:21:10 +05:30
Kovid Goyal
5382fa8692 Bump version of CodeQL actions
Version 2 is deprecated.

Fixes #8537
Fixes #8536
2025-04-14 08:09:31 +05:30
Kovid Goyal
5a7abd6214 CodeQL does not work for Go code 2023-02-14 11:15:44 +05:30
pagedown
dcddaf33e0 ... 2023-02-11 20:43:42 +08:00
pagedown
d1e54a1d3b CI: Bump versions of the deprecated github actions to the latest 2023-02-11 20:33:29 +08:00
pagedown
3c7df680cf Get go version from go.mod
No need to update multiple places when bumping the go version.
2023-02-11 20:33:08 +08:00
Kovid Goyal
27ae9104ac Bump required Go version to 1.20
This allows us to use the stdlib for ECDH crypto used by remote control.
Fixes #5976
2023-02-03 09:32:56 +05:30
Kovid Goyal
77a3916f6f We need go >= 1.19 2023-01-05 19:41:42 +05:30
Kovid Goyal
d60ecfa8a6 Install go 1.18 for codeql build 2022-11-14 20:35:41 +05:30
Alex
13539bd8c6 build: harden codeql-analysis.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
2022-09-23 22:14:16 +02:00
Kovid Goyal
a4f1caeb4e Missed a couple of actions invocations 2022-04-01 07:31:10 +05:30
pagedown
693fc0f0c7 CI: Disable codeql auto install python dependencies 2022-02-23 21:28:29 +08:00
Kovid Goyal
89a93af1d5 GitHub says checkouting out HEAD^2 for merge commits is no longer needed for CodeQL 2021-12-01 20:20:58 +05:30
Kovid Goyal
a95a1f1158 Specify languages for CodeQL 2021-10-21 19:43:52 +05:30
Kovid Goyal
d506fa0565 Use python3 in code analysis build step 2020-07-07 08:41:20 +05:30
Kovid Goyal
de1a0d48a6 Use ci script to build kitty for code scanning 2020-07-07 08:35:04 +05:30
Kovid Goyal
a20e5fefd3 ... 2020-07-07 08:27:10 +05:30
Kovid Goyal
44558560f9 Dont use autobuild for code scanning 2020-07-07 08:24:37 +05:30
Kovid Goyal
677f154f03 Create codeql-analysis.yml
Enable GitHub code scanning for vulnerabilities
2020-07-07 08:21:14 +05:30