Skip to content

👷 ci(codeql): move CodeQL to advanced setup - #192

Closed
gaborbernat wants to merge 1 commit into
mainfrom
codeql-advanced-setup
Closed

gaborbernat wants to merge 1 commit into
mainfrom
codeql-advanced-setup

Conversation

@gaborbernat

Copy link
Copy Markdown
Member

CodeQL default setup runs on ubuntu-latest, and GitHub warns on every run that the label will migrate to Ubuntu 26. This PR moves scanning to a committed workflow pinned to ubuntu-26.04, the runner the other jobs here already use, so the notice goes away and runner changes show up in review.

The workflow scans what default setup scans today: actions and python with the default query suite and build-mode: none, on pushes to main, pull requests, and a weekly schedule. Each language runs as its own job and uploads under its own /language:<lang> category.

Rollout

  • Turn off CodeQL default setup in the repository settings right before merging. GitHub does not process advanced setup results while default setup is enabled, so until the switch the upload step on this PR can report that default setup is on.

Default setup runs on ubuntu-latest, which GitHub is migrating to Ubuntu 26.
A committed workflow pins ubuntu-26.04 like the other jobs and keeps the
default setup languages, query suite and triggers.
@gaborbernat gaborbernat added the skip news No user-facing changelog entry is needed label Oct 26, 2026
@gaborbernat
gaborbernat deleted the codeql-advanced-setup branch October 26, 2026 22:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

skip news No user-facing changelog entry is needed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant