Skip to content

ci(codeql): path-gate native language analysis on pull requests - #59

Closed
StringKe wants to merge 2 commits into
mainfrom
docs/openssf-best-practices-passing
Closed

ci(codeql): path-gate native language analysis on pull requests#59
StringKe wants to merge 2 commits into
mainfrom
docs/openssf-best-practices-passing

Conversation

@StringKe

Copy link
Copy Markdown
Owner

Summary

  • CodeQL no longer runs the full language matrix on every pull request.
  • On PRs, always analyze actions and javascript-typescript; run go/python/ruby/java-kotlin/csharp/swift only when matching sdk/** paths change.
  • Full matrix still runs on push to main, weekly schedule, and workflow_dispatch.

Why

A docs/i18n PR was spinning up Analyze swift on macos-latest (building sdk/ios and sdk/macos) despite touching no Swift sources. That wasted minutes and could fail unrelated work.

Test plan

  • This PR should skip native language CodeQL jobs (go/python/ruby/java/csharp/swift) and only run actions + javascript-typescript (plus Detect languages).
  • After merge, a sdk/ios change PR should still run Analyze swift.

Add paste-ready criterion justifications, fix timelines, testing policy,
versioning notes, and homepage feedback links so project 13783 can be
self-certified at Passing.

Signed-off-by: StringKE <stringke.me@gmail.com>
Only run go/python/ruby/java/csharp/swift CodeQL jobs when matching
sdk paths change. Docs and i18n PRs keep actions plus javascript-typescript
without spinning macos Swift builds. Full matrix remains on main,
schedule, and workflow_dispatch.

Signed-off-by: StringKE <stringke.me@gmail.com>
@StringKe

Copy link
Copy Markdown
Owner Author

Replaced by a clean branch rebased on main (squash of #58 already landed).

@StringKe StringKe closed this Aug 11, 2026
@StringKe
StringKe deleted the docs/openssf-best-practices-passing branch August 11, 2026 13:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant