kc3-lang/brotli/.github/workflows/codeql.yml

Tag - branch -mastergithub/HEADgithub/custom-dictionarygithub/mastergithub/recompressiongithub/test_774593500github/test_803421474github/v1.0github/v1.1upstream/HEADupstream/custom-dictionaryupstream/masterupstream/recompressionupstream/test_774593500upstream/test_803421474upstream/v1.0upstream/v1.1- tag -v1.2.0rc2v1.2.0rc1v1.1.0rcv1.1.0v1.0.9v1.0.8v1.0.7v1.0.6v1.0.5v1.0.4v1.0.3v1.0.2v1.0.1v1.0.0v0.6.0v0.4.0v0.3.0v0.2.0v0.1.0go/cbrotli/v1.1.1-rc0go/cbrotli/v1.1.0.bcr.1go/cbrotli/v1.1.0.bcr.0go/cbrotli/v1.1.0go/brotli/v1.1.1-rc0dev/null

• Show log

  Commit

• Hash : 1964cdb1
  Author :
  Date : 2025-10-20T05:06:26
  

  ramp up all GH actions plugins
  
  PiperOrigin-RevId: 821598646
  

Download

• .github/workflows/codeql.yml

• name: "CodeQL"
  
  on:
    push:
      branches: [ "master" ]
    pull_request:
      # The branches below must be a subset of the branches above
      branches: [ "master" ]
    schedule:
      - cron: '18 15 * * 0'
  
  permissions:
    contents: read
  
  concurrency:
    group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}
    cancel-in-progress: ${{ github.event_name == 'pull_request' }}
  
  jobs:
    analyze:
      name: Analyze
      runs-on: 'ubuntu-latest'
      timeout-minutes: 360
      permissions:
        actions: read
        contents: read
        security-events: write
  
      strategy:
        fail-fast: false
        matrix:
          language: [ 'cpp', 'java', 'javascript', 'python' ]
          # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby', 'swift' ]
  
      steps:
  
      - name: Harden Runner
        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
        with:
          egress-policy: audit
  
      - name: Checkout repository
        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
  
      # Initializes the CodeQL tools for scanning.
      - name: Initialize CodeQL
        uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5
        with:
          languages: ${{ matrix.language }}
          # CodeQL is currently crashing on files with large lists:
          #   https://github.com/github/codeql/issues/13656
          config: |
            paths-ignore:
              - research
              - js/test_data.*
  
      - if: matrix.language == 'cpp'
        name: Build CPP
        uses: github/codeql-action/autobuild@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5
  
      - if: matrix.language == 'cpp' || matrix.language == 'java'
        name: Build Java
        run: |
          cd ${GITHUB_WORKSPACE}/java
          bazelisk build --spawn_strategy=local --nouse_action_cache -c opt ...:all
  
      - if: matrix.language == 'javascript'
        name: Build JS
        uses: github/codeql-action/autobuild@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5
  
      - if: matrix.language == 'cpp' || matrix.language == 'python'
        name: Build Python
        run: |
          python setup.py build_ext
  
      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5
        with:
          category: "/language:${{matrix.language}}"
          ref: "${{ github.ref != 'master' && github.ref || '/refs/heads/master' }}"
          sha: "${{ github.sha }}"
  

Download