From f2023cda965d2474610a2f326ba001992141db48 Mon Sep 17 00:00:00 2001 From: Tim Schaub Date: Fri, 19 Nov 2021 11:54:54 -0700 Subject: [PATCH 1/2] Revert "Remove the security scan workflow" --- .github/codeql/config.yml | 4 ++++ .github/workflows/security.yml | 34 ++++++++++++++++++++++++++++++++++ 2 files changed, 38 insertions(+) create mode 100644 .github/codeql/config.yml create mode 100644 .github/workflows/security.yml diff --git a/.github/codeql/config.yml b/.github/codeql/config.yml new file mode 100644 index 0000000000..1402d55d8b --- /dev/null +++ b/.github/codeql/config.yml @@ -0,0 +1,4 @@ +name: "OpenLayers CodeQL Config" + +paths: + - src diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml new file mode 100644 index 0000000000..5a724445b4 --- /dev/null +++ b/.github/workflows/security.yml @@ -0,0 +1,34 @@ +name: "Security Scan" + +on: + push: + branches: + - main + pull_request: + branches: + - main + schedule: + - cron: '0 0 * * 0' # At 00:00 on Sunday + +jobs: + codeql: + runs-on: ubuntu-latest + + steps: + - name: Checkout repository + uses: actions/checkout@v2 + with: + # Must fetch at least the immediate parents so that if this is + # a pull request then we can checkout the head of the pull request. + # Only include this option if you are running this workflow on pull requests. + fetch-depth: 2 + + # Initializes the CodeQL tools for scanning. + - name: Initialize CodeQL + uses: github/codeql-action/init@v1 + with: + languages: javascript + config-file: ./.github/codeql/config.yml + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v1 From 6665b3325bc57fae6e7c94f1391e2bf74c1939d0 Mon Sep 17 00:00:00 2001 From: Tim Schaub Date: Thu, 18 Nov 2021 15:56:24 -0700 Subject: [PATCH 2/2] Update the security scan task --- .github/codeql/config.yml | 4 ---- .github/workflows/security.yml | 11 ++--------- 2 files changed, 2 insertions(+), 13 deletions(-) delete mode 100644 .github/codeql/config.yml diff --git a/.github/codeql/config.yml b/.github/codeql/config.yml deleted file mode 100644 index 1402d55d8b..0000000000 --- a/.github/codeql/config.yml +++ /dev/null @@ -1,4 +0,0 @@ -name: "OpenLayers CodeQL Config" - -paths: - - src diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 5a724445b4..520e42e574 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -15,20 +15,13 @@ jobs: runs-on: ubuntu-latest steps: - - name: Checkout repository - uses: actions/checkout@v2 - with: - # Must fetch at least the immediate parents so that if this is - # a pull request then we can checkout the head of the pull request. - # Only include this option if you are running this workflow on pull requests. - fetch-depth: 2 + - uses: actions/checkout@v2 - # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL uses: github/codeql-action/init@v1 with: languages: javascript - config-file: ./.github/codeql/config.yml + source-root: src - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v1