3 Commits
Author SHA1 Message Date
Issy LongandMike McQuaid 6dd6758824 workflows/codeql: Improve branch triggers and remove fail-fast
Co-authored-by: Mike McQuaid <mike@mikemcquaid.com>
2022-04-18 15:17:17 +01:00
Issy Long 0016baa1cd workflows/codeql: Don't run on schedule, and no need for a matrix
- These were the defaults generated when I clicked the "enable Code
  Scanning" button on GitHub, but...
- Since we only have Ruby in this repo, we don't need a matrix, we can
  just specify `languages: ruby`.
- And this repo gets enough usage that the schedule is not very useful -
  who would look at the scheduled run vs. it running every day on PRs?
2022-04-15 17:36:18 +01:00
Issy Long 266daffbd1 workflows: Add Code Scanning
- https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning
- I just joined the Code Scanning team at work and I figured I'd test out the actual product in the real world by seeing what things it points out for Homebrew, a reasonably large Ruby project.
- This adds a config file to exclude `Library/Homebrew/vendor` as we can't fix problems within gems. :-)
2022-04-15 15:24:49 +01:00