SF-3899 Reduce size of onboarding requests list RPC response #12317
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CodeQL" | |
| permissions: {} | |
| on: | |
| push: | |
| branches: ["master", "develop", "sf-live", "sf-qa"] | |
| pull_request: | |
| merge_group: | |
| schedule: | |
| - cron: "34 18 * * 2" | |
| jobs: | |
| analyze-javascript: | |
| name: Analyze JavaScript | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| persist-credentials: false | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 | |
| with: | |
| languages: javascript | |
| config-file: ./.github/codeql/codeql-javascript-config.yml | |
| dependency-caching: true | |
| - name: Autobuild | |
| uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 | |
| analyze-csharp: | |
| name: Analyze C# | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| strategy: | |
| matrix: | |
| dotnet_version: ["10.0.x"] | |
| node_version: ["22.13.0"] | |
| npm_version: ["11.11.0"] | |
| pnpm_version: ["11.10.0"] | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| persist-credentials: false | |
| - name: "Deps: .NET" | |
| uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0 | |
| with: | |
| dotnet-version: ${{matrix.dotnet_version}} | |
| cache: true | |
| cache-dependency-path: src/SIL.XForge.Scripture/packages.lock.json | |
| - name: "Deps: pnpm" | |
| uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 | |
| with: | |
| version: ${{matrix.pnpm_version}} | |
| - name: Use Node.js ${{matrix.node_version}} | |
| uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0 | |
| with: | |
| node-version: ${{matrix.node_version}} | |
| cache: "pnpm" | |
| cache-dependency-path: | | |
| src/SIL.XForge.Scripture/ClientApp/pnpm-lock.yaml | |
| src/RealtimeServer/pnpm-lock.yaml | |
| - name: Upgrade npm | |
| run: npm install --global npm@${{matrix.npm_version}} | |
| # Install PNPM dependencies. This is an attempt to fix errors building TypeScript that occur in the Autobuild step. | |
| # They might be caused by PNPM dependencies not being successfully installed before trying to build. If this | |
| # doesn't prevent those errors, we should remove this step. | |
| # Another possible approach would be to create a C# build config that does not build the realtime server at all, | |
| # which would result in faster analysis and remove this failure mode. | |
| - name: Install realtime-server dependencies | |
| run: cd src/RealtimeServer && (pnpm ci || (sleep 3m && pnpm ci)) | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 | |
| with: | |
| languages: csharp | |
| queries: security-and-quality | |
| dependency-caching: true | |
| - name: Autobuild | |
| uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 | |
| with: | |
| upload: False | |
| output: sarif-results | |
| - name: filter-sarif | |
| uses: advanced-security/filter-sarif@bc96d9fb9338c5b48cc440b1b4d0a350b26a20db # v1.0.0 | |
| with: | |
| patterns: | | |
| -**/*Tests.cs:cs/hardcoded-credentials | |
| input: sarif-results/csharp.sarif | |
| output: sarif-results/csharp.sarif | |
| - name: Upload SARIF | |
| uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 | |
| with: | |
| sarif_file: sarif-results/csharp.sarif | |
| analyze-python: | |
| name: Analyze Python | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| persist-credentials: false | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 | |
| with: | |
| languages: python | |
| queries: security-and-quality | |
| dependency-caching: true | |
| - name: Autobuild | |
| uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 |