windows-driver-samples.git/.github/workflows/Code-Scanning.yml, branch user/jvalesmena/codeql-sharding

ci: split CodeQL into separate PR and push/schedule jobs

2026-04-01T00:54:29Z

The previous single-job approach with a 4-shard matrix caused PRs to spin up 4 identical runners all building the same changed files. Split into two jobs: - analyze-pr: runs only on pull_request, single runner, builds changed samples via Build-ChangedSamples.ps1. No shard matrix overhead. - analyze: runs on push/schedule, 4-shard matrix, each shard builds its slice of all samples. Also drops the now-unnecessary 'get-changed-files' step from the push path. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

ci: fix shard numbering using 1-based matrix values

2026-03-31T23:29:17Z

GitHub Actions expressions don't support arithmetic operators so 'matrix.shard + 1' was invalid. Switch the matrix to [1, 2, 3, 4] so the job name, step name, and log output all read '1 of 4' through '4 of 4'. The PowerShell script subtracts 1 locally for the 0-based slice math. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

ci: fix shard display numbering and restore build-mode in matrix

2026-03-31T23:26:24Z

- Job name and step name now show '1 of 4' through '4 of 4' (shard+1) instead of '0' through '3 of 4' which looked like an off-by-one bug - Move build-mode back into the matrix (was there before sharding) so it remains explicit and consistent with the original workflow structure Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

ci: upgrade codeql-action from v3 to v4

2026-03-31T23:22:39Z

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

ci: parallelize CodeQL scanning across 4 shards

2026-03-31T23:22:39Z

Split samples alphabetically into 4 equal shards using ListAllSamples.ps1 and run each on a separate machine in parallel. ThrottleLimit stays 1 per shard for accurate CodeQL tracing. Each shard uploads SARIF with a distinct category (shard-0..shard-3) so results merge in the Security tab. On PRs the existing Build-ChangedSamples behavior is preserved (no sharding needed since only changed files are built). Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

ci: update Code-Scanning workflow to use Build-Samples.ps1

2026-03-31T17:34:40Z

Build-AllSamples.ps1 was removed in favor of Build-Samples.ps1. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Update Code-Scanning.yml to use latest windows-drivers pack (#1277)

2025-03-24T22:59:45Z

* Update Code-Scanning.yml to use latest windows-drivers pack * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml: reduce duplacate code

update workflow files to split codeql analysis for push and PR (#1273)

2025-03-19T20:56:21Z

* update workflow files to split codeql analysis for push and PR * test changing a file * remove build all option in script for testing. * Revert "remove build all option in script for testing." This reverts commit 04eb2c34aac69545b56ff86b6d642e453bde89f0. * Revert "test changing a file" This reverts commit d69205126f62ad44af4c5e3b64f1f14637116ea2. * combine pr and push analysis files to remove warning about not having on.push trigger. include script changes and file change for testing * remove test changes

Code scanning updates (#1) (#1221)

2024-09-25T21:35:52Z

* Update Code-Scanning.yml

Deprecate WDK VSIX Install (#1219)

2024-09-24T02:43:48Z

* Deprecate WDK vsix install * Fix WDK extension version print * Remove unecessary splitting on version * Minor build info refactor * Fix indentation of output info * Enough messing with volume size output * Cleanup comment for vsix version * More cleanup and doc update * Remove deprecation statement and install vsix script. * Fixes and updates to building locally documentation. * Dont code scan on license or .md files. * Code scanning ignore changes to .md when pull request is made