Commit Graph
8 Commits
Author SHA1 Message Date
Mike Jensen bab1a5d54b Build change for when go caching should be used (#27209)
* Build change for when go caching should be used

This commit does the following:
* Updates all `setup-go` actions to use v4 (which has caching enabled by default)
* For `shared-workflow` jobs caching is left enabled due to the presumed small size
* For `teleport` jobs caching is now disabled due to the size exceeding the cache limit

This should make all of the mentioned jobs a little faster.

* Update build-api.yaml to re-enable caching
2023-06-02 15:42:56 +00:00
Mike Jensen 7e75aeff1d Add CodeQL Config update requirement to preflight.md docs (#25672)
* Add CodeQL Config update requirement to preflight.md docs

* .github/workflows/codeql.yml: Update branch list to include v13
2023-05-05 15:37:40 +00:00
Mike Jensen 2e2911438d Update CodeQL Schedule to scan release branches (#23169)
* Update CodeQL Schedule to scan release branches

This allows us to switch our release branches to also use the scheduled CodeQL check so we can remove CodeQL from the PR flow for our release branches too.

* Use go dependency caching with auto build

This change speeds up the build by about ~2 minutes (10%)
2023-03-17 15:12:00 +00:00
Mike Jensen dab1eb5e27 CodeQL improvements (#22854)
This makes two changes:
* Reduces action instance type to 16 cores.  This will half the cost without a significant speed difference
* Switch from `make full` to CodeQL Auto Build.  This speeds up the build by about 10 minutes.  I confirmed there is not a reduction in the scan coverage
2023-03-09 21:56:47 +00:00
Mike Jensen 10bd548162 Switch CodeQL to scheduled (#21883)
We still plan to address this root issue, and are tracking making CodeQl faster so it can be a required PR check: https://github.com/gravitational/SecOps/issues/269

However, until then we need to switch this job to be a scheduled task rather than on every PR and push.  This is partly cost motivated, but also we are already hitting our timeouts.  This PR also increases the analysis timeout so that the daily job can be sure to complete.
2023-02-16 17:30:59 +00:00
rosstimothy 3ebbfdd222 Batch Dependabot PRs (#19745) 2023-01-05 13:13:05 +00:00
Mike Jensen 6692d5e18f CodeQL: Set a timeout limit to ensure jobs don't hang (#19224)
Recently the CodeQL jobs started hanging, this is a stop gap measure to make sure action costs remain under control.
2022-12-09 00:45:06 +00:00
Mike Jensen 2d345bd0e7 CodeQL: Rename from codeql-analysis.yml to codeql.yml (#18663) 2022-11-22 16:37:41 +00:00