mirror of
https://github.com/sbroenne/mcp-server-excel.git
synced 2026-09-19 07:53:08 +08:00
Stefan Broenner
a67212a278
* chore(deps): update all dependencies Updates NuGet, npm, Python, the .NET SDK, VS Code tooling, and GitHub Actions. Tests: Release build; MCP protocol and transport tests; extension compile and lint; documentation build; package vulnerability audits. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 5e3452df-35bd-418d-b1f4-8b6903f8df24 * ci: allow verified Python package licenses Allows MIT-0 and PSF-2.0 dependencies and scopes the typing-extensions metadata exception to that package. Tests: dependency workflow YAML parse; full pre-commit gates. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 5e3452df-35bd-418d-b1f4-8b6903f8df24 --------- Copilot-Session: 5e3452df-35bd-418d-b1f4-8b6903f8df24
104 lines
2.7 KiB
YAML
104 lines
2.7 KiB
YAML
# GitHub CodeQL Analysis Workflow
|
|
# Performs advanced security scanning for code vulnerabilities
|
|
|
|
name: "CodeQL Advanced Security"
|
|
|
|
on:
|
|
push:
|
|
branches: [ "main" ]
|
|
paths:
|
|
- 'src/**'
|
|
- 'tests/**'
|
|
- '**.csproj'
|
|
- '**.sln'
|
|
- 'Directory.Build.props'
|
|
- 'Directory.Packages.props'
|
|
- '.github/workflows/codeql.yml'
|
|
- '.github/codeql/**'
|
|
pull_request:
|
|
branches: [ "main" ]
|
|
paths:
|
|
- 'src/**'
|
|
- 'tests/**'
|
|
- '**.csproj'
|
|
- '**.sln'
|
|
- 'Directory.Build.props'
|
|
- 'Directory.Packages.props'
|
|
- '.github/workflows/codeql.yml'
|
|
- '.github/codeql/**'
|
|
schedule:
|
|
# Run CodeQL analysis every Monday at 10:00 AM UTC
|
|
- cron: '0 10 * * 1'
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
security-events: write
|
|
actions: read
|
|
|
|
jobs:
|
|
analyze:
|
|
name: Analyze Code with CodeQL
|
|
runs-on: windows-latest
|
|
timeout-minutes: 360
|
|
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
language: [ 'csharp' ]
|
|
# CodeQL supports: 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift'
|
|
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v7
|
|
|
|
- name: Setup .NET
|
|
uses: actions/setup-dotnet@v6
|
|
with:
|
|
dotnet-version: 10.0.x
|
|
|
|
# Initializes the CodeQL tools for scanning
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@v4
|
|
with:
|
|
languages: ${{ matrix.language }}
|
|
# Use custom configuration file
|
|
config-file: ./.github/codeql/codeql-config.yml
|
|
# Additional query packs (security-focused only)
|
|
queries: +security-extended
|
|
|
|
# Restore dependencies before build
|
|
- name: Restore dependencies
|
|
run: dotnet restore
|
|
|
|
# Build the solution for CodeQL analysis
|
|
- name: Build solution
|
|
run: dotnet build --no-restore --configuration Release
|
|
|
|
# Perform CodeQL Analysis
|
|
- name: Perform CodeQL Analysis
|
|
uses: github/codeql-action/analyze@v4
|
|
with:
|
|
category: "/language:${{matrix.language}}"
|
|
# Upload results even if there are errors
|
|
upload: true
|
|
# Output SARIF results
|
|
output: sarif-results
|
|
|
|
# Upload SARIF results as artifact for review
|
|
- name: Upload CodeQL Results
|
|
if: always()
|
|
uses: actions/upload-artifact@v7
|
|
with:
|
|
name: codeql-sarif-results-${{ matrix.language }}
|
|
path: sarif-results
|
|
retention-days: 30
|
|
|
|
# Create issue if critical vulnerabilities found
|
|
- name: Check for Critical Issues
|
|
if: failure()
|
|
run: |
|
|
Write-Output "⚠️ CodeQL found security issues. Review the Security tab."
|
|
shell: pwsh
|