8000 Merge main into releases/v3 by github-actions[bot] · Pull Request #2157 · github/codeql-action · GitHub
[go: up one dir, main page]

Skip to content

Merge main into releases/v3 #2157

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 20 commits into from
Feb 22, 2024
Merged
Changes from 4 commits
Commits
Show all changes
20 commits
Select commit Hold shift + click to select a range
b7c408a
Update changelog and version after v3.24.3
github-actions[bot] Feb 15, 2024
29e98fd
Update checked-in dependencies
github-actions[bot] Feb 15, 2024
65b0987
Merge pull request #2149 from github/mergeback/v3.24.3-to-main-37961461
angelapwen Feb 15, 2024
ef0a773
Account for existing but empty `cpus` file
angelapwen Feb 15, 2024
2ddf87a
Update release documentation with `v3` instructions
angelapwen Feb 15, 2024
0ce9708
Merge pull request #2152 from github/angelapwen/update-release-docs
angelapwen Feb 16, 2024
8cb81db
Add unit tests for `getCgroupCpuCountFromCpus`
angelapwen Feb 16, 2024
c709994
Add permissions info to README
aeisenberg Feb 16, 2024
b9d85b4
Bump the npm group with 4 updates
dependabot[bot] Feb 19, 2024
4a610e2
Update checked-in dependencies
github-actions[bot] Feb 19, 2024
1737b12
Merge pull request #2154 from github/dependabot/npm_and_yarn/npm-8576…
angelapwen Feb 20, 2024
592977e
Merge pull request #2151 from angelapwen/fix-cpu-group-bug
angelapwen Feb 20, 2024
a7dc229
add first_party_analysis boolean to all status reports
nickfyson Feb 1, 2024
36c51ac
Capitalize Code Scanning
aeisenberg Feb 20, 2024
bf8c75e
Merge pull request #2153 from github/aeisenberg/add-permissions-doc
aeisenberg Feb 21, 2024
f32f0bf
ensure only the upload-sarif action can submit a status report with f…
nickfyson Feb 21, 2024
cca1dde
Merge branch 'main' into nickfyson/first-or-third-party
nickfyson Feb 21, 2024
ebda17e
respond to review comments
nickfyson Feb 21, 2024
982d934
Merge pull request #2111 from github/nickfyson/first-or-third-party
nickfyson Feb 21, 2024
5b1ae29
Update changelog for v3.24.4
github-actions[bot] Feb 21, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,10 @@ We recommend using default setup to configure CodeQL analysis for your repositor

You can also configure advanced setup for a repository to find security vulnerabilities in your code using a highly customizable code scanning configuration. For more information, see "[Configuring advanced setup for code scanning](https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/configuring-advanced-setup-for-code-scanning)" and "[Customizing your advanced setup for code scanning](https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning)."

### Permissions

All advanced setup code scanning workflows must have the `security-events: write` permission. Workflows in private repositories muse additionally have the `contents: read` permission. For more information, see [Assigning permissions to jobs](https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs).

## Supported versions of the CodeQL Action

The following versions of the CodeQL Action are currently supported:
Expand Down
0