actions/setup-python
3
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

Add on: pull_request trigger to CodeQL workflow (#180)

Browse Source 
From February 2021, in order to provide feedback on pull requests, Code Scanning workflows must be configured with both `push` and `pull_request` triggers. This is because Code Scanning compares the results from a pull request against the results for the base branch to tell you only what has changed between the two.

Early in the beta period we supported displaying results on pull requests for workflows with only `push` triggers, but have discontinued support as this proved to be less robust.

See https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#scanning-pull-requests for more information on how best to configure your Code Scanning workflows.
This commit is contained in:
Robin Neatherway 2021-01-15 11:20:02 +00:00 committed by GitHub
parent 66319ca9fa
commit a1121449a2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.github/workflows/codeql-analysis.yml vendored
View File

@ -2,6 +2,7 @@ name: "Code scanning - action"
on:
push:
pull_request:
schedule:
- cron: '25 3 * * 5'