SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
54,681 Commits 2 Branches 1 Tag
c462e63eea7c781e00a3ce83055967dbbd67bf96
Commit Graph
8 Commits
Author SHA1 Message Date
dependabot[bot] 68181cf8a7 build(deps): bump github/codeql-action from 1.0.23 to 1.0.24 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.23 to 1.0.24.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/a627e9fa504113bfa8e90a9b429b157a38b1cdbd...e095058bfa09de8070f94e98f5dc059531bc6235)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-11-25 05:13:11 +03:00
dependabot[bot] d59d6cc154 build(deps): bump github/codeql-action from 1.0.22 to 1.0.23 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.22 to 1.0.23.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/5581e08a65fc3811c3ac78939dd59e7a8adbf003...a627e9fa504113bfa8e90a9b429b157a38b1cdbd)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-11-18 01:17:19 +03:00
Evgeny Vereshchagin 7e7e31521a ci: run codeql on PRs from Dependabot 
To make sure PRs like https://github.com/systemd/systemd/pull/21409
don't break anything.
 2021-11-17 10:14:33 +00:00
Evgeny Vereshchagin 510afa460a ci: tighten codeql and labeler even more 
by moving the read permissions to the top level and
granting additional permissions to the specific jobs.
It should help to prevent new jobs that could be added
there eventually from having write access to resources they
most likely would never need.
 2021-11-14 10:51:07 +00:00
Evgeny Vereshchagin b3a1fb795a ci: LGPLv2+ify dependapot config and codeql action 2021-11-14 09:48:22 +00:00
Evgeny Vereshchagin e44a47d186 ci: pin the codeql action to SHAs 
It's a follow-up to https://github.com/systemd/systemd/pull/21316.

Judging by https://github.com/evverx/systemd/pull/36, Dependabot
supports their release cycle
 2021-11-14 10:42:04 +00:00
dependabot[bot] 5ae4964028 build(deps): bump actions/checkout from 2 to 2.4.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 2.4.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...ec3a7ce113134d7a93b817d10a8272cb61118579)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-11-13 16:45:32 +03:00
Evgeny Vereshchagin 33796123bc ci: run codeql-analysis daily 
https://github.com/github/codeql-action

Apparently to judge from a couple of warnings I haven't seen
before it's a bit different from LGTM.
 2021-11-12 15:47:15 +00:00