Skip to content

ci: scan CodeQL on main - #620

Merged
berezovskyi merged 1 commit into
mainfrom
chore/codeql-main-baseline
Oct 22, 2026
Merged

berezovskyi merged 1 commit into
mainfrom
chore/codeql-main-baseline

Conversation

@berezovskyi

Copy link
Copy Markdown
Member

Summary

  • Run CodeQL on each push to main to establish a full default-branch analysis.
  • Add a weekly scheduled scan to keep the baseline current.
  • Keep the existing pull request analysis.

Motivation

The repository has no recent CodeQL analysis for the default branch, so the current alert list does not provide a current baseline. Push and scheduled scans on main will publish full branch results and refresh them over time.

Validation

  • git diff --check passes.
  • The first full main scan will run after this workflow change is merged and a subsequent scan trigger occurs.

@berezovskyi
berezovskyi marked this pull request as ready for review October 22, 2026 19:30
@berezovskyi
berezovskyi enabled auto-merge October 22, 2026 19:31
@berezovskyi
berezovskyi added this pull request to the merge queue Oct 22, 2026
Merged via the queue into main with commit 250a54c Oct 22, 2026
17 of 18 checks passed
@berezovskyi
berezovskyi deleted the chore/codeql-main-baseline branch October 22, 2026 19:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant