ci: use shared policy verification and scanning #37

Merged
KofTwentyTwo merged 1 commits from feature/orb-main-policy into main 2026-10-21 16:44:25 +00:00
3 changed files with 40 additions and 0 deletions

No files matched your search

+14
View File
@@ -0,0 +1,14 @@
version: 2.1
setup: true
orbs:
qqq-orb: kingsrook/qqq-orb@0.7.14
workflows:
setup:
jobs:
- qqq-orb/generate_pipeline:
orb_version: 0.7.14
filters:
branches:
ignore: automation/qbit-rc-pending
tags:
only: /.*/
+23
View File
@@ -0,0 +1,23 @@
name: CodeQL
'on':
push:
branches:
- main
- develop
- release/**
- hotfix/**
pull_request: {}
schedule:
- cron: 41 16 * * 0
workflow_dispatch: {}
permissions:
contents: read
actions: read
security-events: write
packages: read
concurrency:
group: codeql-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
jobs:
analyze:
uses: QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml@c288a8864fe9054f68410e1d78f5863aea4c4d22
+3
View File
@@ -0,0 +1,3 @@
profile: repository-policy
orb_version: 0.7.14
default_branch: develop