diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 198ea7ad9d..3c1c32103d 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -36,9 +36,11 @@ on: branches: [main] paths: - 'src/**' + - 'tests/**' pull_request: paths: - 'src/**' + - 'tests/**' schedule: - cron: "0 0 * * *" workflow_dispatch: @@ -66,6 +68,7 @@ jobs: # Use only 'java' to analyze code written in Java, Kotlin or both # Use only 'javascript' to analyze code written in JavaScript, TypeScript or both # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support + dotnet-version: ['9.0'] steps: - name: Checkout repository @@ -83,6 +86,12 @@ jobs: # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs queries: +security-extended,security-and-quality + # This is needed because codeQl currently only supports .NET8 + - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} + uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25 # v4.1.0 + with: + dotnet-version: ${{ matrix.dotnet-version }} + # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift). # Automates dependency installation for Python, Ruby, and JavaScript, optimizing the CodeQL analysis setup. # If this step fails, then you should remove it and run the build manually (see below) diff --git a/.github/workflows/dependencies.yaml b/.github/workflows/dependencies.yaml index 686e10d90e..bb9e8cedc2 100644 --- a/.github/workflows/dependencies.yaml +++ b/.github/workflows/dependencies.yaml @@ -61,8 +61,6 @@ jobs: uses: actions/setup-dotnet@3951f0dfe7a07e2313ec93c75700083e2005cbab # v4.3.0 with: dotnet-version: ${{ matrix.dotnet-version }} - # change to preview .NET 9 until fix for https://github.com/NuGet/Home/issues/12954 gets released for .NET 8 - dotnet-quality: 'preview' - name: Checkout repository uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 diff --git a/tests/framework/Framework.Tests.Shared/Framework.Tests.Shared.csproj b/tests/framework/Framework.Tests.Shared/Framework.Tests.Shared.csproj index 1bafacdb5f..9e1d546a73 100644 --- a/tests/framework/Framework.Tests.Shared/Framework.Tests.Shared.csproj +++ b/tests/framework/Framework.Tests.Shared/Framework.Tests.Shared.csproj @@ -32,7 +32,7 @@ - +