Pavel Punsky 36e1eee855 Restore CodeQL permissions, category, and manual build mode (#1901) ...

PR #1517 (Jun 2024) simplified codeql.yml in ways that left scans
incomplete: it dropped the actions:read / contents:read permissions and
the analyze category, both of which CodeQL Action requires for results
to land under the existing language category. Combined with the later
cpp -> c-cpp rename and v3 -> v4 upgrade, scheduled scans have not
refreshed the Security tab since Jun 1, 2024.

- Add actions:read and contents:read back to job permissions
- Set build-mode: manual on init (required for v3+/v4 manual builds)
- Pass category "/language:c-cpp" on analyze so SARIF de-duplicates
against the configured language
- Build with --parallel so the tracer keeps up on default runners

2026-05-08 09:02:51 -07:00

..

workflows

Restore CodeQL permissions, category, and manual build mode (#1901)

2026-05-08 09:02:51 -07:00

dependabot.yml

Upgrade GitHub Actions and enable dependabot for them

2022-05-06 11:53:54 +03:00