From 574fed2bdf195a5d0815125e93edf0d01a1cb277 Mon Sep 17 00:00:00 2001 From: Tim van der Meij Date: Sat, 31 Jul 2021 15:33:07 +0200 Subject: [PATCH] Improve the code analysis workflow with quality checks This allows us to get the quality checks that LGTM does into GitHub Advanced Security. Since it not only runs security checks anymore, the workflow is also renamed to CodeQL to make this more explicit (and this matches the documentation better). --- .../workflows/{github_advanced_security.yml => codeql.yml} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename .github/workflows/{github_advanced_security.yml => codeql.yml} (90%) diff --git a/.github/workflows/github_advanced_security.yml b/.github/workflows/codeql.yml similarity index 90% rename from .github/workflows/github_advanced_security.yml rename to .github/workflows/codeql.yml index 99052c01b..2dd07042e 100644 --- a/.github/workflows/github_advanced_security.yml +++ b/.github/workflows/codeql.yml @@ -1,4 +1,4 @@ -name: GitHub Advanced Security +name: CodeQL on: [push, pull_request] jobs: analyze: @@ -23,7 +23,7 @@ jobs: uses: github/codeql-action/init@v1 with: languages: ${{ matrix.language }} - queries: security-extended + queries: security-and-quality - name: Autobuild CodeQL uses: github/codeql-action/autobuild@v1