Skip to content

Enable sensible CodeQL scanning #9519

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Copilot wants to merge 2 commits into from
Closed

Enable sensible CodeQL scanning #9519

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
9cce529
Add CodeQL workflow with scoped configuration
Copilot Apr 18, 2026
87d97d9
Fix CodeQL workflow language list
Copilot Apr 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 18 additions & 0 deletions .github/codeql/codeql-config.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
name: ecamp3 CodeQL config

queries:
- uses: security-and-quality

paths-ignore:
- '**/node_modules/**'
- '**/dist/**'
- '**/coverage/**'
- '**/*.min.js'
- '.ops/**'
- 'e2e/**'
- 'frontend-old/**'
- 'translation/**'
- 'api/tests/**'
- 'api/fixtures/**'
- 'pdf/tests/**'
- 'print/test/**'
43 changes: 43 additions & 0 deletions .github/workflows/codeql.yml
View file
Open in desktop

@manuelmeister manuelmeister Apr 18, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@copilot the run failed: https://github.com/ecamp/ecamp3/actions/runs/24598249050/job/71940243542?pr=9519

Fix this

Copilot AI Apr 18, 2026

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed in 87d97d9 by removing unsupported php from the CodeQL matrix. That run failure is resolved. No UI changes were made, so there is no UI screenshot.

Original file line number Diff line number Diff line change
@@ -0,0 +1,43 @@
name: CodeQL

on:
push:
branches:
- devel
pull_request:
merge_group:
schedule:
- cron: '17 4 * * 1'
workflow_dispatch:

permissions:
contents: read

jobs:
analyze:
name: Analyze (${{ matrix.language }})
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
strategy:
fail-fast: false
matrix:
include:
- language: javascript-typescript
build-mode: none
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

- name: Initialize CodeQL
uses: github/codeql-action/init@v4
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
config-file: ./.github/codeql/codeql-config.yml

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v4
with:
category: '/language:${{ matrix.language }}'