windows-driver-samples.git/.github/workflows, branch user/jvalesmena/codeql-sharding

ci: split CodeQL into separate PR and push/schedule jobs

2026-04-01T00:54:29Z

The previous single-job approach with a 4-shard matrix caused PRs to spin up 4 identical runners all building the same changed files. Split into two jobs: - analyze-pr: runs only on pull_request, single runner, builds changed samples via Build-ChangedSamples.ps1. No shard matrix overhead. - analyze: runs on push/schedule, 4-shard matrix, each shard builds its slice of all samples. Also drops the now-unnecessary 'get-changed-files' step from the push path. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

ci: fix shard numbering using 1-based matrix values

2026-03-31T23:29:17Z

GitHub Actions expressions don't support arithmetic operators so 'matrix.shard + 1' was invalid. Switch the matrix to [1, 2, 3, 4] so the job name, step name, and log output all read '1 of 4' through '4 of 4'. The PowerShell script subtracts 1 locally for the 0-based slice math. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

ci: fix shard display numbering and restore build-mode in matrix

2026-03-31T23:26:24Z

- Job name and step name now show '1 of 4' through '4 of 4' (shard+1) instead of '0' through '3 of 4' which looked like an off-by-one bug - Move build-mode back into the matrix (was there before sharding) so it remains explicit and consistent with the original workflow structure Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

ci: upgrade codeql-action from v3 to v4

2026-03-31T23:22:39Z

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

ci: parallelize CodeQL scanning across 4 shards

2026-03-31T23:22:39Z

Split samples alphabetically into 4 equal shards using ListAllSamples.ps1 and run each on a separate machine in parallel. ThrottleLimit stays 1 per shard for accurate CodeQL tracing. Each shard uploads SARIF with a distinct category (shard-0..shard-3) so results merge in the Security tab. On PRs the existing Build-ChangedSamples behavior is preserved (no sharding needed since only changed files are built). Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

ci: update Code-Scanning workflow to use Build-Samples.ps1

2026-03-31T17:34:40Z

Build-AllSamples.ps1 was removed in favor of Build-Samples.ps1. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge remote-tracking branch 'origin/develop' into user/jvalesmena/new-build-samples

2026-03-30T22:47:36Z

# Conflicts: # Build-AllSamples.ps1 # Build-SampleSet.ps1

Remove Build-AllSamples.ps1 and Build-SampleSet.ps1 in favor of Build-Samples.ps1

2026-03-30T22:26:00Z

- Delete Build-AllSamples.ps1 and Build-SampleSet.ps1 (replaced by Build-Samples.ps1) - Update ci.yml workflow to call Build-Samples.ps1 - Update Build-ChangedSamples.ps1 to call Build-Samples.ps1 - Rewrite Building-Locally.md Step 6 with new script usage and output format - Update Step 7 NuGet notes to reference Build-Samples.ps1

removing unused workflow

2026-03-26T08:25:38Z

Fix RCE vulnerability: pass issue body/number via env vars instead of direct interpolation

2026-03-13T18:07:28Z

Co-authored-by: 5an7y-Microsoft <219205893+5an7y-Microsoft@users.noreply.github.com>