From 73871ea1b0e0b35433b9a95f4aad8c0326b52b2c Mon Sep 17 00:00:00 2001 From: "Andrei G." Date: Fri, 20 Feb 2026 14:25:27 +0100 Subject: [PATCH] ci: add CodeQL advanced setup for PR analysis Replace default CodeQL setup with custom workflow that triggers on pull_request events, enabling security analysis for fork PRs. Closes #65 --- .github/workflows/codeql.yml | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..aad2aa1 --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,34 @@ +name: CodeQL + +on: + push: + branches: [main] + pull_request: + branches: [main] + schedule: + - cron: "30 1 * * 1" + +jobs: + analyze: + name: Analyze (rust) + runs-on: ubuntu-latest + timeout-minutes: 30 + permissions: + security-events: write + + steps: + - uses: actions/checkout@v4 + + - uses: dtolnay/rust-toolchain@stable + + - uses: Swatinem/rust-cache@v2 + + - uses: github/codeql-action/init@v3 + with: + languages: rust + + - run: cargo build --workspace + + - uses: github/codeql-action/analyze@v3 + with: + category: "/language:rust"