Skip to content

ci(codeql): path-gate native language analysis on pull requests - #60

Merged
StringKe merged 2 commits into
mainfrom
fix/codeql-path-gate
Aug 11, 2026
Merged

ci(codeql): path-gate native language analysis on pull requests#60
StringKe merged 2 commits into
mainfrom
fix/codeql-path-gate

Conversation

@StringKe

Copy link
Copy Markdown
Owner

Summary

  • CodeQL no longer runs the full language matrix on every pull request.
  • On PRs, always analyze actions and javascript-typescript; run go/python/ruby/java-kotlin/csharp/swift only when matching sdk/** paths change.
  • Full matrix still runs on push to main, weekly schedule, and workflow_dispatch.

Why

A docs/i18n PR spun up Analyze swift on macos-latest (building sdk/ios and sdk/macos) despite touching no Swift sources.

Test plan

  • This PR should skip native CodeQL jobs and only run Detect languages + actions + javascript-typescript.
  • A later PR that only changes sdk/ios should still run Analyze swift.

Only run go/python/ruby/java/csharp/swift CodeQL jobs when matching
sdk paths change. Docs and i18n PRs keep actions plus javascript-typescript
without spinning macos Swift builds. Full matrix remains on main,
schedule, and workflow_dispatch.

Signed-off-by: StringKE <stringke.me@gmail.com>
Job-level if cannot use the matrix context when the job has needs.
Detect languages now outputs matrix JSON; analyze consumes it via
fromJSON so path gating validates and runs.

Signed-off-by: StringKE <stringke.me@gmail.com>
@StringKe
StringKe merged commit e42180f into main Aug 11, 2026
11 checks passed
@StringKe
StringKe deleted the fix/codeql-path-gate branch August 11, 2026 13:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant