summaryrefslogtreecommitdiff
path: root/.github/workflows/codeql-analysis.yml
AgeCommit message (Collapse)Author
2025-05-23Disabled TRAP cache of CodeQLHiroshi SHIBATA
2025-05-01Bump up the latest version of actionsHiroshi SHIBATA
2025-03-06Update actions/checkout and actions/cache and othersHiroshi SHIBATA
2022-12-23Bump actions/checkout from 3.1.0 to 3.2.0dependabot[bot]
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.1.0 to 3.2.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8...755da8c3cf115ac066823e79a1e1788f8940201b) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7003
2022-12-23Bump actions/cache from 3.0.11 to 3.2.0dependabot[bot]
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.11 to 3.2.0. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7...c17f4bf4666a8001b1a45c09eb7a485c41aa64c3) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7000
2022-12-23Bump github/codeql-action from 2.1.35 to 2.1.37dependabot[bot]
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.35 to 2.1.37. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b2a92eb56d8cb930006a1c6ed86b0782dd8a4297...959cbb7472c4d4ad70cdfe6f4976053fe48ab394) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/7001
2022-12-20Ignore man directories entirely [ci skip]Nobuyoshi Nakada
2022-12-05Bump github/codeql-action from 2.1.33 to 2.1.35dependabot[bot]
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.33 to 2.1.35. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v2.1.33...b2a92eb56d8cb930006a1c6ed86b0782dd8a4297) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/6860
2022-11-30Enable to dispatch Code scanning [ci skip]Nobuyoshi Nakada
2022-11-28[StepSecurity] ci: Harden GitHub ActionsStepSecurity Bot
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> Notes: Merged: https://github.com/ruby/ruby/pull/6811
2022-11-25[StepSecurity] ci: Harden GitHub ActionsStepSecurity Bot
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> Notes: Merged: https://github.com/ruby/ruby/pull/6810
2022-11-03Run only daily schedule because CodeQL provides a lot of false-positive ↵Hiroshi SHIBATA
results for Ruby code
2022-10-18Ignore manual files only commits [ci skip]Nobuyoshi Nakada
2022-10-16Do not run CodeQL on dependabot PRsTakashi Kokubun
2022-08-22Ignore `.document` only commits [ci skip]Nobuyoshi Nakada
2022-06-19Skip CIs if the head commit message contains '[DOC]'Nobuyoshi Nakada
2022-05-02Bump github/codeql-action from 1 to 2dependabot[bot]
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v1...v2) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/5868
2022-03-24Bump actions/checkout from 2 to 3dependabot[bot]
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/5704
2022-03-24Bump actions/cache from 2 to 3dependabot[bot]
Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3. - [Release notes](https://github.com/actions/cache/releases) - [Commits](https://github.com/actions/cache/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Notes: Merged: https://github.com/ruby/ruby/pull/5705
2021-12-18Skip tests on pull requests labeled as DocumentationNobuyoshi Nakada
Notes: Merged: https://github.com/ruby/ruby/pull/5293
2021-12-16[DOC] Skip tests if only documents change [ci skip]Nobuyoshi Nakada
Run only checks for source code. Currently, our CIs do almost nothing about the documents.
2021-12-02Cache downloaded filesNobuyoshi Nakada
Cache downloaded external libraries/gems, which are expected not changed so frequently. Also sometimes downloading from zlib returns the current time as the date header in unexpected format, and checksums mismatch at that time. Notes: Merged: https://github.com/ruby/ruby/pull/5201 Merged-By: nobu <nobu@ruby-lang.org>
2021-11-21Throttle pull-requests only [ci skip]Nobuyoshi Nakada
2021-11-18Throttle GitHub Actions [ci skip]Nobuyoshi Nakada
As GitHub Actions are choking a lot lately, throttle the checks down to the latest commit only per branches.
2021-10-29Skip CodeQL if only document files changed [ci skip]Nobuyoshi Nakada
2021-10-14Disable install-doc at CodeQLNobuyoshi Nakada
2021-10-14Set GNUMAKEFLAGS at CodeQLNobuyoshi Nakada
2021-08-02Use codeql-config.yml for codeql-action/initHiroshi SHIBATA
Notes: Merged: https://github.com/ruby/ruby/pull/4702
2021-08-02Removed unnecessary configuration for the latest version of actions/checkoutHiroshi SHIBATA
Notes: Merged: https://github.com/ruby/ruby/pull/4702
2021-07-01Remove gdbm/dbm related code from CIJeremy Evans
The related extensions have been removed. Notes: Merged: https://github.com/ruby/ruby/pull/4619
2021-03-08Removed HEAD^2 checkout to suppress a CodeQL annotation [ci skip]Nobuyoshi Nakada
2020-08-01Remove obsolete rubygems fileNobuyoshi Nakada
Fixes a weird error in CodeQL autobuild.
2020-07-03Ignore conftest.c under the ext directories for CodeQL analysisHiroshi SHIBATA
Notes: Merged: https://github.com/ruby/ruby/pull/3280
2020-06-09Added CodeQL scanning by GitHub (#3196)Hiroshi SHIBATA
Added configuration for CodeQL scanning by GitHub Notes: Merged-By: hsbt <hsbt@ruby-lang.org>