Merge pull request #943 from crazy-max/codeql

ci: update codeql workflow
2026-03-23 10:20:10 +00:00 · 2026-03-20 16:57:15 +01:00 · 2026-03-20 11:48:51 +01:00 · 2026-03-16 12:45:34 +01:00 · 2026-03-16 05:52:18 +00:00
6 changed files with 28 additions and 33 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -5,46 +5,41 @@ on:
    branches:
      - 'master'
      - 'releases/v*'
-    paths:
-      - '.github/workflows/codeql.yml'
-      - 'dist/**'
-      - 'src/**'
  pull_request:
-    paths:
-      - '.github/workflows/codeql.yml'
-      - 'dist/**'
-      - 'src/**'

 permissions:
  actions: read
  contents: read
  security-events: write

+env:
+  NODE_VERSION: "24"
+
 jobs:
  analyze:
    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        language:
-          - javascript-typescript
    steps:
      -
        name: Checkout
        uses: actions/checkout@v6
+      -
+        name: Enable corepack
+        run: |
+          corepack enable
+          yarn --version
+      -
+        name: Set up Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
      -
        name: Initialize CodeQL
        uses: github/codeql-action/init@v4
        with:
-          languages: ${{ matrix.language }}
-          config: |
-            paths:
-              - src
-      -
-        name: Autobuild
-        uses: github/codeql-action/autobuild@v4
+          languages: javascript-typescript
+          build-mode: none
      -
        name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v4
        with:
-          category: "/language:${{matrix.language}}"
+          category: "/language:javascript-typescript"
--- a/.github/workflows/update-dist.yml
+++ b/.github/workflows/update-dist.yml
@@ -14,7 +14,7 @@ jobs:
      -
        name: GitHub auth token from GitHub App
        id: docker-read-app
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
        with:
          app-id: ${{ secrets.GHACTIONS_REPO_WRITE_APP_ID }}
          private-key: ${{ secrets.GHACTIONS_REPO_WRITE_APP_PRIVATE_KEY }}
--- a/dist/index.js
+++ b/dist/index.js
--- a/dist/index.js.map
+++ b/dist/index.js.map
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
    "@actions/core": "^3.0.0",
    "@aws-sdk/client-ecr": "^3.1000.0",
    "@aws-sdk/client-ecr-public": "^3.1000.0",
-    "@docker/actions-toolkit": "^0.81.0",
+    "@docker/actions-toolkit": "^0.79.0",
    "http-proxy-agent": "^7.0.2",
    "https-proxy-agent": "^7.0.6",
    "js-yaml": "^4.1.1"
--- a/yarn.lock
+++ b/yarn.lock
@@ -877,9 +877,9 @@ __metadata:
  languageName: node
  linkType: hard

-"@docker/actions-toolkit@npm:^0.81.0":
-  version: 0.81.0
-  resolution: "@docker/actions-toolkit@npm:0.81.0"
+"@docker/actions-toolkit@npm:^0.79.0":
+  version: 0.79.0
+  resolution: "@docker/actions-toolkit@npm:0.79.0"
  dependencies:
    "@actions/artifact": "npm:^6.2.0"
    "@actions/cache": "npm:^6.0.0"
@@ -903,7 +903,7 @@ __metadata:
    semver: "npm:^7.7.4"
    tar-stream: "npm:^3.1.7"
    tmp: "npm:^0.2.5"
-  checksum: 10/d1e975337fede15244d4968dbc5a7c0b6e169df4082b61573d6774965ba3d12a741fbb552261d4d99643a325078a595b6c192b8e960a518ae087033f6b12c74d
+  checksum: 10/d64849ba49b2b59e2e93237a70be03fd7c43b1f7f01bac3f7557616ba5f59be785cb12a273bbb6a71c1e0d959f1bc6c673111b587c57bd2d6da105dcc500921a
  languageName: node
  linkType: hard

@@ -3145,7 +3145,7 @@ __metadata:
    "@actions/core": "npm:^3.0.0"
    "@aws-sdk/client-ecr": "npm:^3.1000.0"
    "@aws-sdk/client-ecr-public": "npm:^3.1000.0"
-    "@docker/actions-toolkit": "npm:^0.81.0"
+    "@docker/actions-toolkit": "npm:^0.79.0"
    "@eslint/js": "npm:^9.39.3"
    "@types/js-yaml": "npm:^4.0.9"
    "@types/node": "npm:^24.11.0"
Author	SHA1	Message	Date
CrazyMax	da5b89b92c	Merge pull request #943 from crazy-max/codeql ci: update codeql workflow	2026-03-20 16:57:15 +01:00
CrazyMax	b78dc2c156	ci: update codeql workflow Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-20 11:48:51 +01:00
CrazyMax	c144859092	Merge pull request #939 from docker/dependabot/github_actions/actions/create-github-app-token-3 build(deps): bump actions/create-github-app-token from 2 to 3	2026-03-16 12:45:34 +01:00
dependabot[bot]	cf45a603d2	build(deps): bump actions/create-github-app-token from 2 to 3 Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2 to 3. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](https://github.com/actions/create-github-app-token/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-16 05:52:18 +00:00