James MaesandClaude Fable 5
cbdce91363
- 15 real-git integration tests for LibGit2GitClient against local fixture repos (35 tests total; engine line coverage 60.6%) - gclo.Cli: scriptable head over the engine (sync/orgs, --json, exit codes 0/1/2, token via env/file/stdin only) + docs/CLI.md; verified against live GitHub (orgs incl. personal account, parallel clone, pull path) - Velopack 1.2.0: custom Main entry point, UpdateService (GithubSource), Help > Check for updates with update-and-restart flow - GitHub Actions: CI (x64 -warnaserror, tests, coverage gate >=60%, dotnet format gate), CodeQL, dependency review, Dependabot, tag-driven release pipeline (Velopack pack/upload, CLI zip, gated NuGet + winget) + docs/RELEASING.md - TODO.md status updates; T22 (Windows-invalid paths) prioritized next Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
56 lines
1.4 KiB
YAML
56 lines
1.4 KiB
YAML
# CodeQL static analysis for C#.
|
|
#
|
|
# C# is a compiled language, so CodeQL needs a real build. We use build-mode
|
|
# "manual" and run the same x64 solution build the CI workflow uses (without
|
|
# -warnaserror - the CI workflow already gates warnings; this workflow's job is
|
|
# security analysis, and it should still scan code that has a pending warning).
|
|
name: CodeQL
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
pull_request:
|
|
branches: [main]
|
|
schedule:
|
|
# Weekly scan (Mondays 06:30 UTC) so new CodeQL queries run even when the
|
|
# code has not changed.
|
|
- cron: '30 6 * * 1'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
analyze:
|
|
name: Analyze (csharp)
|
|
runs-on: windows-latest
|
|
timeout-minutes: 120
|
|
permissions:
|
|
# Required for github/codeql-action to upload scan results.
|
|
security-events: write
|
|
# Required to fetch public CodeQL packs.
|
|
packages: read
|
|
actions: read
|
|
contents: read
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v7
|
|
|
|
- name: Set up .NET SDK
|
|
uses: actions/setup-dotnet@v5
|
|
with:
|
|
dotnet-version: 10.0.x
|
|
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@v4
|
|
with:
|
|
languages: csharp
|
|
build-mode: manual
|
|
|
|
- name: Build solution (x64)
|
|
run: dotnet build gclo.slnx -p:Platform=x64
|
|
|
|
- name: Perform CodeQL analysis
|
|
uses: github/codeql-action/analyze@v4
|
|
with:
|
|
category: '/language:csharp'
|