summaryrefslogtreecommitdiff
path: root/.github/workflows/Code-Scanning.yml
AgeCommit message (Collapse)Author
2026-05-21Change runner to windows-2025-vs2026 for analysis job5an7y-Microsoft
2026-03-31Merge pull request #1365 from microsoft/develop5an7y-Microsoft
RI Develop to Main
2026-03-31ci: update Code-Scanning workflow to use Build-Samples.ps15an7y
Build-AllSamples.ps1 was removed in favor of Build-Samples.ps1. Co-authored-by: Copilot <[email protected]>
2026-03-20Bump tj-actions/changed-files from 41 to 46 in /.github/workflowsdependabot[bot]
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 41 to 46. - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](https://github.com/tj-actions/changed-files/compare/v41...v46) --- updated-dependencies: - dependency-name: tj-actions/changed-files dependency-version: '46' dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
2025-03-24Update Code-Scanning.yml to use latest windows-drivers pack (#1277)Jacob Ronstadt
* Update Code-Scanning.yml to use latest windows-drivers pack * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml: reduce duplacate code
2025-03-19update workflow files to split codeql analysis for push and PR (#1273)Jacob Ronstadt
* update workflow files to split codeql analysis for push and PR * test changing a file * remove build all option in script for testing. * Revert "remove build all option in script for testing." This reverts commit 04eb2c34aac69545b56ff86b6d642e453bde89f0. * Revert "test changing a file" This reverts commit d69205126f62ad44af4c5e3b64f1f14637116ea2. * combine pr and push analysis files to remove warning about not having on.push trigger. include script changes and file change for testing * remove test changes
2024-09-25Code scanning updates (#1) (#1221)Jacob Ronstadt
* Update Code-Scanning.yml
2024-09-23Deprecate WDK VSIX Install (#1219)Matt
* Deprecate WDK vsix install * Fix WDK extension version print * Remove unecessary splitting on version * Minor build info refactor * Fix indentation of output info * Enough messing with volume size output * Cleanup comment for vsix version * More cleanup and doc update * Remove deprecation statement and install vsix script. * Fixes and updates to building locally documentation. * Dont code scan on license or .md files. * Code scanning ignore changes to .md when pull request is made
2024-06-28RI develop to main (#1189)JakobL-MSFT
* Memory leakage in message "sizeof(SCANNER_MESSAGE) * threadCount * requestCount" bytes long memory is allocated but only "sizeof(SCANNER_MESSAGE) * threadCount" bytes long of it is freed. * Handles malloc function fail case * Refactors comment line * Solves the miscalculation of the message index * simbatt: Fix broken registry read-back The GetSimBattStateFromRegistry function is currently using default settings if GetSimBattStateFromRegistry succeeds, whereas settings from registry are only applied if GetSimBattStateFromRegistry fails. This does not make sense to me. Therefore proposing to remove the `!` negation from `if (!NT_SUCCESS(Status)) {` on the line after `Status = GetSimBattStateFromRegistry(Device, RegState);` so that default settings are loaded when registry read-back fails. * Issue of freeing memory without waiting completion of threads accessing it is fixed * Fixes information leakage warning Fixes the issue of possible information leakage from uninitialized padding bytes * Avoids possible multiplication overflow warning * Avoids possible multiplication overflow warning * CI Pipelines build with WDK Nuget Packages (#1179) Integrate nuget into the workflow pipelines * FI from main to develop (#1188) Fix text and minor issues in Winget configuration files Co-authored-by: Adonais Romero Gonzalez <[email protected]> * Improve version info, vsix installation, and update building locally readme * Fix printing vsix version * Refactored vsix install and cleaned up build sampleset --------- Co-authored-by: İsa Yurdagül <[email protected]> Co-authored-by: Fredrik Orderud <[email protected]> Co-authored-by: Christian Allred <[email protected]> Co-authored-by: tristanb-ntdev <[email protected]> Co-authored-by: Matt <[email protected]> Co-authored-by: Adonais Romero Gonzalez <[email protected]>
2024-03-05Update jobs to use Node.js 20 (#1134)Jacob Ronstadt
* Update Code-Scanning.yml actions/checkout to v4 and microsoft/setup-msbuild to v2 * Update ci-pr.yml to use node20 * Update ci.yml to use node20
2024-02-05Update codeql code scanning to add microsoft/windows-drivers queries (#1098)Jacob Ronstadt
* test code scanning with new package * update code scanning file. test without building * fix typo * add back build step * Update Code-Scanning.yml * Update Code-Scanning.yml * Update Code-Scanning.yml
2023-06-01Update MsBuild action (#990)Adonais Romero González
2023-03-08Enable the CodeQL workflow to pull submodules similar to the regular ↵JakobL-MSFT
workflow. (#883) user-jakobl-codeql-submodules
2023-02-08Enable CodeQL to work thru reasonable workarounds - Cherry pick to main (#863)JakobL-MSFT
Enable CodeQL to work thru reasonable workarounds. (#857)
2023-02-03Incremental improvements of the sample build system (#849)JakobL-MSFT
2023-01-30Build scripts update (#844)Adonais Romero González
--------- Co-authored-by: Jakob Lichtenberg (170957) <[email protected]>
2023-01-10Remove capture of changed filesLaura
Remove capture of changed files as they are unneeded in this workflow. We will build all files to create a baseline.
2023-01-09Re Configure Code-Scanning.ymlLaura
In accordance with this issue https://github.com/github/codeql-cli-binaries/issues/149 I have reconfigured to run code scanning on all PR's (to include text only changes) and adjusted the build command to build all solutions, not just the changed ones.
2022-12-27Updates Code Scanning ExclusionLaura
Excludes all files within the .github directory from triggering the Code Scanning workflow.
2022-12-27Create Code-Scanning.ymlLaura
This file is identical to the existing workflow except that it has been created via the GitHub Security Code Scanning menu, which registers the workflow with the Code Scanning triggers unlike the existing workflow. If this successfully meets the Security requirements, the next commit will remove the duplicate workflow.