Skip to content

馃懛 ci(codeql): move to advanced setup on ubuntu-26.04 - #26

Merged
gaborbernat merged 1 commit into
mainfrom
codeql-advanced-setup
Oct 26, 2026
Merged

gaborbernat merged 1 commit into
mainfrom
codeql-advanced-setup

Conversation

@gaborbernat

Copy link
Copy Markdown
Member

CodeQL default setup runs on ubuntu-latest, and GitHub now shows a notice that the label will migrate to Ubuntu 26. This PR replaces default setup with a committed workflow pinned to ubuntu-26.04, so the notice goes away and the runner image changes only when we change it.

The workflow does what default setup does today: it analyzes actions and python with the default query suite and no build, on pushes to main, pull requests, and a weekly schedule, plus manual dispatch. Each language runs as its own job and uploads under its own category, so existing alerts carry over. The job gets only contents: read and security-events: write.

馃殌 Rollout

  • Turn off CodeQL default setup in the repository settings right before merging: GitHub does not process advanced-setup results while default setup is enabled, so until then the upload step may report that default setup is on.

@gaborbernat gaborbernat added the skip news No user-facing release note needed label Oct 26, 2026
@gaborbernat
gaborbernat merged commit cfe984e into main Oct 26, 2026
13 of 15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

skip news No user-facing release note needed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant