 Evgeny Vereshchagin
|
e44a47d186
|
ci: pin the codeql action to SHAs
It's a follow-up to https://github.com/systemd/systemd/pull/21316.
Judging by https://github.com/evverx/systemd/pull/36, Dependabot
supports their release cycle
|
2021-11-14 10:42:04 +00:00 |
|
 dependabot[bot]
|
5ae4964028
|
build(deps): bump actions/checkout from 2 to 2.4.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 2.4.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...ec3a7ce113134d7a93b817d10a8272cb61118579)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-11-13 16:45:32 +03:00 |
|
|
Evgeny Vereshchagin
|
33796123bc
|
ci: run codeql-analysis daily
https://github.com/github/codeql-action
Apparently to judge from a couple of warnings I haven't seen
before it's a bit different from LGTM.
|
2021-11-12 15:47:15 +00:00 |
|