From 7f68292be8ec6d694b5f1dac2ad4d71e374fb745 Mon Sep 17 00:00:00 2001 From: Michael Howitz Date: Wed, 8 Jan 2025 08:19:45 +0100 Subject: [PATCH 1/3] Try out CodeQL Community Packs --- .github/workflows/codeql.yml | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..449302e --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,22 @@ +# Generated from: +# https://github.com/zopefoundation/meta/tree/master/config/pure-python +name: CodeQL + +on: + push: + pull_request: + workflow_dispatch: + +jobs: + codeql: + runs-on: ubuntu-latest + if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name + name: CodeQL + steps: + - uses: actions/checkout@v4 + - name: Initialize CodeQL + uses: github/codeql-action/init@v3 + with: + languages: python + queries: python + packs: githubsecuritylab/codeql-python-extensions,githubsecuritylab/codeql-python-queries From 77445b18eb51cb4ba2589305ea623753e2f5bc85 Mon Sep 17 00:00:00 2001 From: Michael Howitz Date: Wed, 8 Jan 2025 08:24:29 +0100 Subject: [PATCH 2/3] Remove seemingly not existing githubsecuritylab/codeql-python-queries --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 449302e..795c0df 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -19,4 +19,4 @@ jobs: with: languages: python queries: python - packs: githubsecuritylab/codeql-python-extensions,githubsecuritylab/codeql-python-queries + packs: githubsecuritylab/codeql-python-queries From 7befb968b30cd05456c90d0b4a07c8b94cb47df9 Mon Sep 17 00:00:00 2001 From: Michael Howitz Date: Wed, 8 Jan 2025 08:26:58 +0100 Subject: [PATCH 3/3] Maybe we need codeql/python-queries? --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 795c0df..6589c6e 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -19,4 +19,4 @@ jobs: with: languages: python queries: python - packs: githubsecuritylab/codeql-python-queries + packs: codeql/python-queries, githubsecuritylab/codeql-python-queries