Commit Graph
5 Commits
Author SHA1 Message Date
Mike Jensen dab1eb5e27 CodeQL improvements (#22854)
This makes two changes:
* Reduces action instance type to 16 cores.  This will half the cost without a significant speed difference
* Switch from `make full` to CodeQL Auto Build.  This speeds up the build by about 10 minutes.  I confirmed there is not a reduction in the scan coverage
2023-03-09 21:56:47 +00:00
Mike Jensen 10bd548162 Switch CodeQL to scheduled (#21883)
We still plan to address this root issue, and are tracking making CodeQl faster so it can be a required PR check: https://github.com/gravitational/SecOps/issues/269

However, until then we need to switch this job to be a scheduled task rather than on every PR and push.  This is partly cost motivated, but also we are already hitting our timeouts.  This PR also increases the analysis timeout so that the daily job can be sure to complete.
2023-02-16 17:30:59 +00:00
rosstimothy 3ebbfdd222 Batch Dependabot PRs (#19745) 2023-01-05 13:13:05 +00:00
Mike Jensen 6692d5e18f CodeQL: Set a timeout limit to ensure jobs don't hang (#19224)
Recently the CodeQL jobs started hanging, this is a stop gap measure to make sure action costs remain under control.
2022-12-09 00:45:06 +00:00
Mike Jensen 2d345bd0e7 CodeQL: Rename from codeql-analysis.yml to codeql.yml (#18663) 2022-11-22 16:37:41 +00:00