-
Notifications
You must be signed in to change notification settings - Fork 5.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[EngSys] Enable CodeQL for JavaScript and Actions #33060
Conversation
mikeharder
commented
Mar 6, 2025
•
edited
Loading
edited
- Fixes [EngSys] Enable CodeQL for Actions #33023
Next Steps to MergeNext steps that must be taken to merge this PR:
|
PR validation pipeline restarted successfully. If there is ApiView generated, it will be updated in this comment. |
pull_request: | ||
branches: [ "main", "release-*" ] | ||
schedule: | ||
- cron: '27 4 * * 1' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What's the significance of 4:27?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This was the default when GH created the file for me. Maybe random, or the time I created the file? Can change to a more "standard" time if we want.
config: | | ||
paths: | ||
- .github |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this supposed to be a multi line string?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
config
is a multi-line string. paths
is a list.
.github/workflows/codeql.yml
Outdated
@@ -47,12 +47,17 @@ jobs: | |||
config: | | |||
paths: | |||
- .github | |||
sparse-checkout: | | |||
.github |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this to scope to only the github folder? Do we not want any other validation?
If we do want to scope it might be worth mentioning that here in a comment.