From c2b45515d2f5f78cc7a4dec6de8d14081a045836 Mon Sep 17 00:00:00 2001 From: Phil Schneider Date: Mon, 9 Dec 2024 14:47:28 +0100 Subject: [PATCH] build: adjust codeql build to use net9 Refs: #1155 --- .github/workflows/codeql.yml | 9 +++++++++ .github/workflows/dependencies.yaml | 2 -- 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 5a87f25e6d..57181484d7 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -36,9 +36,11 @@ on: branches: [main] paths: - 'src/**' + - 'tests/**' pull_request: paths: - 'src/**' + - 'tests/**' schedule: - cron: "0 0 * * *" workflow_dispatch: @@ -66,6 +68,7 @@ jobs: # Use only 'java' to analyze code written in Java, Kotlin or both # Use only 'javascript' to analyze code written in JavaScript, TypeScript or both # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support + dotnet-version: ['9.0'] steps: - name: Checkout repository @@ -83,6 +86,12 @@ jobs: # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs queries: +security-extended,security-and-quality + # This is needed because codeQl currently only supports .NET8 + - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} + uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25 # v4.1.0 + with: + dotnet-version: ${{ matrix.dotnet-version }} + # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift). # Automates dependency installation for Python, Ruby, and JavaScript, optimizing the CodeQL analysis setup. # If this step fails, then you should remove it and run the build manually (see below) diff --git a/.github/workflows/dependencies.yaml b/.github/workflows/dependencies.yaml index 2990e565ef..273c2312f4 100644 --- a/.github/workflows/dependencies.yaml +++ b/.github/workflows/dependencies.yaml @@ -61,8 +61,6 @@ jobs: uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25 # v4.1.0 with: dotnet-version: ${{ matrix.dotnet-version }} - # change to preview .NET 9 until fix for https://github.com/NuGet/Home/issues/12954 gets released for .NET 8 - dotnet-quality: 'preview' - name: Checkout repository uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2