james.maesandCodex
1232edaa61
* ci: use shared orb pipelines and source scanning Co-Authored-By: Codex <noreply@openai.com> * fix: use released QQQ BOM on main Replace unavailable 0.40.0-SNAPSHOT with the matching 0.40.0 release. Validated with Maven 3.9.11 clean verify: 18 tests passed. Co-Authored-By: Codex <noreply@openai.com> --------- Co-authored-by: Codex <noreply@openai.com>
24 lines
530 B
YAML
24 lines
530 B
YAML
name: CodeQL
|
|
'on':
|
|
push:
|
|
branches:
|
|
- main
|
|
- develop
|
|
- release/**
|
|
- hotfix/**
|
|
pull_request: {}
|
|
schedule:
|
|
- cron: 41 16 * * 0
|
|
workflow_dispatch: {}
|
|
permissions:
|
|
contents: read
|
|
actions: read
|
|
security-events: write
|
|
packages: read
|
|
concurrency:
|
|
group: codeql-${{ github.event.pull_request.number || github.ref }}
|
|
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
|
|
jobs:
|
|
analyze:
|
|
uses: QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml@c288a8864fe9054f68410e1d78f5863aea4c4d22
|