dependabot[bot]
18f63869be
build(deps): bump github/codeql-action from 2 to 3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-12-13 18:23:57 +00:00
dependabot[bot]
39d07d2159
build(deps): bump actions/checkout from 3 to 4
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-09-04 18:22:16 +00:00
Shaun Jackman
0de4282511
CI: Use ubuntu-22.04 rather than ubuntu-latest (ubuntu-20.04)
...
Use ubuntu-22.04 for the CI tests rather than ubuntu-latest,
which is currently ubuntu-20.04.
2022-09-06 14:16:16 +01:00
Issy Long
6dd6758824
workflows/codeql: Improve branch triggers and remove fail-fast
...
Co-authored-by: Mike McQuaid <mike@mikemcquaid.com>
2022-04-18 15:17:17 +01:00
Issy Long
0016baa1cd
workflows/codeql: Don't run on schedule, and no need for a matrix
...
- These were the defaults generated when I clicked the "enable Code
Scanning" button on GitHub, but...
- Since we only have Ruby in this repo, we don't need a matrix, we can
just specify `languages: ruby`.
- And this repo gets enough usage that the schedule is not very useful -
who would look at the scheduled run vs. it running every day on PRs?
2022-04-15 17:36:18 +01:00
Issy Long
266daffbd1
workflows: Add Code Scanning
...
- https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning
- I just joined the Code Scanning team at work and I figured I'd test out the actual product in the real world by seeing what things it points out for Homebrew, a reasonably large Ruby project.
- This adds a config file to exclude `Library/Homebrew/vendor` as we can't fix problems within gems. :-)
2022-04-15 15:24:49 +01:00