Skip to content

Conversation

@tibbes
Copy link
Contributor

@tibbes tibbes commented Feb 4, 2021

The default workflow for CodeQL / code scanning has been updated to analyse the merge commit of pull requests rather than the head commit. This is now the preferred configuration.

marcogario
marcogario previously approved these changes Feb 4, 2021
Copy link
Contributor

@marcogario marcogario left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We could further reduce this by changing the triggers to :

  push: [main, v1]
  pull_request: [main, v1]

Bring the CodeQL workflow up to date with the latest recommended
configuration, which analyses the merge commit of pull requests (not the
head of the PR branch).
Analysing all branches on both 'push' and 'pull request' events causes
duplicate analysis. It is only necessary to analyse the _target_
branches of pull requests on push.
@tibbes tibbes force-pushed the update-codeql-workflow branch from 63e2c23 to 121ffbb Compare February 4, 2021 11:51
@tibbes tibbes merged commit a666a69 into main Feb 4, 2021
@tibbes tibbes deleted the update-codeql-workflow branch February 4, 2021 12:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants