Vincent Koc
dbab162abd
ci: split codeql quality workflow ( #73404 )
2026-04-28 01:04:59 -07:00
Vincent Koc
cc80a40d86
fix(ci): preserve mixed macOS CodeQL SARIF findings
...
Conservatively filter macOS CodeQL SARIF by dropping only findings where every location is SwiftPM build output. Verified with workflow sanity, local jq filtering, PR CI, and a failed-job rerun for an unrelated stalled Vitest shard.
2026-04-27 15:43:53 -07:00
Vincent Koc
6e77c10c6c
fix(ci): harden macOS CodeQL SARIF filtering
...
Harden the macOS CodeQL SARIF filter to drop only findings whose primary location is SwiftPM build output. Verified with workflow sanity, local jq filtering, full PR CI, and profile=macos-security branch proof in 18m44s.
2026-04-27 15:25:38 -07:00
Vincent Koc
2c2a240344
fix(ci): filter macOS CodeQL dependency SARIF
...
Filter SwiftPM dependency build results from the manual macOS CodeQL shard before upload. Verified with workflow sanity, local jq filtering, and profile=macos-security branch proof in 15m54s. PR CI has the same unrelated extensions/memory-core timeout failure currently present on main.
2026-04-27 14:37:29 -07:00
Vincent Koc
36b5e34fc0
fix(ci): add macOS CodeQL security shard
...
Add a manual macOS CodeQL security shard scoped to app sources. Verified with profile=macos-security on Blacksmith in 16m55s.
2026-04-27 13:40:34 -07:00
Vincent Koc
74eccd42d8
fix(ci): add android CodeQL security shard
...
Add a manual Android CodeQL security shard scoped to app production sources. Verified with profile=android-security on Blacksmith in 4m22s.
2026-04-27 12:32:55 -07:00
dependabot[bot]
48f433479d
chore(deps): bump github/codeql-action
...
Bump github/codeql-action from b25d0ebf40e5b63ee81e1bd6e5d2a12b7c2aeb61 to 95e58e9a2cdfd71adc6e0353d5c52f41a045d225.
2026-04-27 12:01:27 -07:00
Vincent Koc
282af9c50a
fix(ci): run CodeQL on small Blacksmith runners ( #72988 )
2026-04-27 11:56:48 -07:00
Vincent Koc
e864fd39cc
fix(ci): narrow CodeQL critical scan ( #72982 )
2026-04-27 11:42:42 -07:00
Mason Huang
b79272baad
CI: increase CodeQL JavaScript runner size ( #71402 )
...
* CI: increase CodeQL JavaScript runner size
* CI: trim CodeQL JavaScript scope further
* ci: keep CodeQL extension coverage
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-04-25 13:04:48 +08:00
Peter Steinberger
b2b43085bc
ci: use larger Blacksmith macOS runners
2026-04-21 19:03:50 +01:00
Peter Steinberger
24644e3c27
ci: remove sticky disk cache plumbing
2026-04-20 16:03:55 +01:00
Mason Huang
69d25f5f16
CI: add daily schedule to CodeQL workflow ( #67645 )
...
* CI: add weekly schedule to CodeQL workflow
* CI: add daily schedule to CodeQL workflow and pin third-party actions
2026-04-16 21:27:45 +08:00
Ayaan Zaidi
0c2e6fe97f
ci(android): use explicit flavor debug tasks
2026-03-20 12:55:52 +05:30
Peter Steinberger
6a812b621d
ci: modernize GitHub Actions workflow versions
2026-03-13 16:57:23 +00:00
Peter Steinberger
41718404a1
ci: opt workflows into Node 24 action runtime
2026-03-13 16:41:22 +00:00
Val Alexander
5296147c20
CI: select Swift 6.2 toolchain for CodeQL ( #41787 )
...
Merged via squash.
Prepared head SHA: 8abc6c1657
Co-authored-by: BunsDev <68980965+BunsDev@users.noreply.github.com >
Co-authored-by: BunsDev <68980965+BunsDev@users.noreply.github.com >
Reviewed-by: @BunsDev
2026-03-10 01:22:41 -05:00
Vincent Koc
b6520d7172
CI: scope CodeQL JavaScript analysis
2026-03-08 10:29:56 -07:00
Vincent Koc
c6ff137a6f
CI: make CodeQL manual only
2026-03-07 18:23:21 -08:00
Vincent Koc
1e3daa6373
CI: fix CodeQL concurrency
2026-03-07 18:20:32 -08:00
Vincent Koc
31564bed1d
CI: fix CodeQL manual builds
2026-03-07 18:18:53 -08:00
Vincent Koc
b2f8f5e4dd
CI: add CodeQL workflow
2026-03-07 18:15:06 -08:00