Commit Graph
4 Commits
Author SHA1 Message Date
Reed Loden 05323821d8 ci: Swap CIFuzz and CodeQL to larger runner and improve CodeQL workflow (#16490)
We now have access to larger runners, so move CIFuzz and CodeQL workflows to use
a runner with Ubuntu 22.04 LTS with 32 cores and 128GB RAM.

https://docs.github.com/en/actions/using-github-hosted-runners/using-larger-runners

Additionally, change CodeQL workflow to include recommendations from GitHub CodeQL team.
2022-09-19 08:46:53 -07:00
Reed Loden 8a4ee05dbb ci: Add paths/paths-ignore to GitHub Actions workflows to reduce unnecessary builds (#15636)
We're running CIFuzz and CodeQL in many cases where it doesn't make sense. We get
charged for GitHub Actions minutes used, so let's make sure to only run them when
absolutely necessary.

For CIFuzz, only run if a *.go file has been modified.
For CodeQL, only run if a path outside of docs/* and rfd/* has been modified.
2022-08-19 23:46:32 +00:00
Reed Loden 9bfa8dea92 ci: Reduce CodeQL max goroutines to address failed extraction (#15683)
Ref https://github.com/github/codeql/issues/9888

CodeQL was failing intermittently due to exceeding limits when
going through the Go extraction phase. Reduce the concurrent
extractions by half (32 --> 16) in an attempt to fix this.
2022-08-19 22:24:00 +00:00
Reed Loden c9ccc36efd ci: Implement code scanning with CodeQL (#15109)
Use CodeQL to scan all pull requests and pushes for known security issues.

https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-with-codeql
2022-08-05 22:20:51 +00:00