Fix release.yml actions workflow
#37
Closed
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…codeql-action/init Co-authored-by: data-douser <70299490+data-douser@users.noreply.github.com>
Contributor
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.Scanned Files
|
There was a problem hiding this comment.
Pull request overview
Updates the release workflow to make manual (workflow_dispatch) releases reliably target a tag and to centralize CodeQL CLI setup using the repo’s composite action.
Changes:
- Configure
actions/checkoutto fetch tags for release runs. - Replace
github/codeql-action/init@v3with the local.github/actions/setup-codeql-environmentaction, adding CodeQL toPATHand skipping language runtime installs.
Collaborator
Author
|
Superseded by #38 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary of Changes
This pull request updates the release workflow configuration to improve tag handling and streamline the CodeQL setup process. The main changes focus on ensuring the correct commit is checked out during releases and centralizing the CodeQL environment setup.
Outline of Changes
Workflow improvements:
fetch-tags: trueto theactions/checkoutstep to ensure tags are fetched, allowing the workflow to resolve and checkout the correct tag during releases.CodeQL setup refactor:
github/codeql-action/init@v3with a custom local action.github/actions/setup-codeql-environmentfor setting up the CodeQL environment, and updated the input parameters to add the tool to the path and skip installing language runtimes.