ci: make the two runner-image regressions non-fatal #2174
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CodeQL | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| branches: | |
| - main | |
| schedule: | |
| - cron: "23 4 * * 1" | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: codeql-${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| analyze: | |
| name: Analyze (${{ matrix.language }}) | |
| runs-on: ubuntu-24.04 | |
| timeout-minutes: 60 | |
| env: | |
| TMPDIR: ${{ github.workspace }}/tmp | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| # The Actions extractor also analyzes Bash embedded in workflow `run:` | |
| # steps. CodeQL does not provide a standalone Bash language extractor. | |
| language: | |
| - rust | |
| - actions | |
| - python | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| - name: Prepare workspace temp directory | |
| run: mkdir -p "$TMPDIR" | |
| # The runner image stopped shipping `zstd`, which the pinned bundle below | |
| # needs: `tar --zstd ...` dies with "zstd: Cannot exec: No such file or | |
| # directory" and every Analyze job fails in Initialize CodeQL before a | |
| # single line is analyzed. | |
| - name: Ensure zstd can unpack the CodeQL bundle | |
| run: sudo apt-get update -qq && sudo apt-get install -y -qq zstd | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4 | |
| with: | |
| # CodeQL 2.26.4 regresses Rust analysis enough to terminate the hosted runner. | |
| # Remove this pin after https://github.com/github/codeql/issues/22463 is fixed. | |
| tools: https://github.com/github/codeql-action/releases/download/codeql-bundle-v2.26.3/codeql-bundle-linux64.tar.zst | |
| languages: ${{ matrix.language }} | |
| build-mode: none | |
| - name: Analyze | |
| uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4 | |
| with: | |
| category: /language:${{ matrix.language }} |