From 60a253db9b2d26fc4e76906fab905206dcd31b04 Mon Sep 17 00:00:00 2001 From: dgw Date: Sun, 30 Apr 2023 18:22:43 -0500 Subject: [PATCH 1/3] README: remove LGTM badges; service no longer exists --- README.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/README.md b/README.md index ebb46c2..9f4d257 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,5 @@ [![Python Tests](https://github.com/sopel-irc/sopel-bucket/actions/workflows/python-tests.yml/badge.svg?branch=master)](https://github.com/sopel-irc/sopel-bucket/actions/workflows/python-tests.yml) [![PyPI version](https://badge.fury.io/py/sopel-modules.bucket.svg)](https://badge.fury.io/py/sopel-modules.bucket) -[![Total alerts](https://img.shields.io/lgtm/alerts/g/sopel-irc/sopel-bucket.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/sopel-irc/sopel-bucket/alerts/) -[![Language grade: Python](https://img.shields.io/lgtm/grade/python/g/sopel-irc/sopel-bucket.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/sopel-irc/sopel-bucket/context:python) **Maintainer:** [@RustyBower](https://github.com/rustybower) From 1b3a9510bffa0b87c73349998f39e0134f1d6de7 Mon Sep 17 00:00:00 2001 From: dgw Date: Sun, 30 Apr 2023 18:24:53 -0500 Subject: [PATCH 2/3] CodeQL GHA workflow to replace LGTM analysis --- .github/workflows/codeql.yml | 41 ++++++++++++++++++++++++++++++++++++ 1 file changed, 41 insertions(+) create mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..ff4a49c --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,41 @@ +name: "CodeQL" + +on: + push: + branches: [ "master" ] + pull_request: + branches: [ "master" ] + schedule: + - cron: "8 20 * * 1" + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-latest + permissions: + actions: read + contents: read + security-events: write + + strategy: + fail-fast: false + matrix: + language: [ python ] + + steps: + - name: Checkout + uses: actions/checkout@v3 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v2 + with: + languages: ${{ matrix.language }} + queries: +security-and-quality + + - name: Autobuild + uses: github/codeql-action/autobuild@v2 + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v2 + with: + category: "/language:${{ matrix.language }}" From 26b68469cd7f1713bd1a7baf29cb2a1ec6e4a75c Mon Sep 17 00:00:00 2001 From: dgw Date: Mon, 29 Apr 2024 22:03:56 -0500 Subject: [PATCH 3/3] Drop deprecated action versions from CodeQL workflow MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Hasn't even been merged and it would already throw Node deprecation warnings 😂 --- .github/workflows/codeql.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ff4a49c..75069de 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -24,18 +24,18 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v3 with: languages: ${{ matrix.language }} queries: +security-and-quality - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@v3 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v3 with: category: "/language:${{ matrix.language }}"