Skip to content

[GitHub Actions] Enable CodeQL code scanning for our GitHub Actions/Workflows (Angular version)#5965

Merged
tdonohue merged 1 commit into
DSpace:mainfrom
tdonohue:enable_codeql_for_actions
Jul 20, 2026
Merged

[GitHub Actions] Enable CodeQL code scanning for our GitHub Actions/Workflows (Angular version)#5965
tdonohue merged 1 commit into
DSpace:mainfrom
tdonohue:enable_codeql_for_actions

Conversation

@tdonohue

Copy link
Copy Markdown
Member

References

Description

GitHub now supports security scanning of GitHub action/workflow files (under .github/workflows).

References:

This small PR enables that security scanning for our Backend repository's GitHub actions,

NOTE: This PR also REMOVES the autobuild step because that step is only necessary for compiled languages like Java. In all recent runs of this codeql action, when the autobuild runs, it always reports None of the languages in this project require extra build steps

Instructions for Reviewers

  • Review the configuration changes
  • This can only be tested via code merger

… as that's only required for scanning compiled languages like Java.
@tdonohue tdonohue added this to the 11.0 milestone Jul 16, 2026
@tdonohue tdonohue added code task 1 APPROVAL pull request only requires a single approval to merge port to dspace-8_x This PR needs to be ported to `dspace-8_x` branch for next bug-fix release port to dspace-9_x This PR needs to be ported to `dspace-9_x` branch for next bug-fix release port to dspace-10_x This PR needs to be ported to `dspace-10_x` branch for next bug-fix release labels Jul 16, 2026
@tdonohue tdonohue moved this to 🙋 Needs Reviewers Assigned in DSpace 11.0 Release Jul 16, 2026
@tdonohue tdonohue removed port to dspace-8_x This PR needs to be ported to `dspace-8_x` branch for next bug-fix release port to dspace-9_x This PR needs to be ported to `dspace-9_x` branch for next bug-fix release port to dspace-10_x This PR needs to be ported to `dspace-10_x` branch for next bug-fix release labels Jul 20, 2026
@tdonohue

Copy link
Copy Markdown
Member Author

Merging immediately as this has no changes to code. It just enables CodeQL security scanning for our GitHub Actions. (NOTE: I've realized that CodeQL settings only need to be on the main branch)

@tdonohue
tdonohue merged commit c11edb4 into DSpace:main Jul 20, 2026
16 checks passed
@github-project-automation github-project-automation Bot moved this from 🙋 Needs Reviewers Assigned to ✅ Done in DSpace 11.0 Release Jul 20, 2026
@tdonohue
tdonohue deleted the enable_codeql_for_actions branch July 20, 2026 18:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1 APPROVAL pull request only requires a single approval to merge code task

Projects

Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

1 participant