Files
Nick 98c140e037 ci: simplify maintainer workflow (#972)
# Pull Request Description

Simplifies the daily maintainer CI path without weakening required checks, exact-head evidence, fork safety, canonical convergence, or release integrity.

- runs independent source validation without waiting for PR evidence;
- cancels only superseded pull-request runs and keeps non-PR runs independent;
- removes repeated canonical evidence setup and duplicate catalog generation;
- binds Pages to the exact published `vX.Y.Z` tag before expensive setup;
- fixes canonical successor validation and removes retired workflow/retry code;
- aligns the maintainer skill and documentation with the implemented contract.
2026-07-22 16:40:14 +02:00

61 lines
1.8 KiB
YAML

name: CodeQL
on:
push:
branches: ["main"]
pull_request:
branches: ["main"]
schedule:
- cron: "23 5 * * 1"
workflow_dispatch:
permissions:
actions: read
contents: read
security-events: write
concurrency:
group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && format('pr-{0}', github.event.pull_request.number) || format('run-{0}', github.run_id) }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
jobs:
analyze:
name: Analyze (${{ matrix.language }})
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
include:
# This repository contains real source in these languages and CodeQL can
# analyze them on GitHub-hosted runners without bespoke build steps.
- language: actions
build-mode: none
- language: c-cpp
build-mode: none
- language: go
build-mode: autobuild
- language: javascript-typescript
build-mode: none
- language: python
build-mode: none
steps:
- name: Checkout repository
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
- name: Initialize CodeQL
uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
config-file: ./.github/codeql/codeql-config.yml
- name: Autobuild
if: matrix.build-mode == 'autobuild'
uses: github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4
- name: Analyze
uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4
with:
category: "/language:${{ matrix.language }}"