diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index cd8e8501e4d..2de6c285a10 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -791,7 +791,6 @@ embed.go @grafana/grafana-as-code /.github/workflows/metrics-collector.yml @torkelo /.github/workflows/milestone.yml @tolzhabayev /.github/workflows/pr-checks.yml @tolzhabayev -/.github/workflows/pr-codeql-analysis-go.yml @DanCech /.github/workflows/pr-codeql-analysis-javascript.yml @DanCech /.github/workflows/pr-codeql-analysis-python.yml @DanCech /.github/workflows/pr-commands.yml @tolzhabayev diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 8c8b1abde50..bfd38be8eec 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -3,12 +3,12 @@ # # You may wish to alter this file to override the set of languages analyzed, # or to provide custom queries or build logic. -name: "CodeQL" +name: "CodeQL checks" on: workflow_dispatch: push: - branches: [main, v*.*.*] + branches: ['**'] # run on all branches paths-ignore: - '**/*.cue' - '**/*.json' @@ -25,6 +25,7 @@ jobs: analyze: name: Analyze runs-on: ubuntu-latest + continue-on-error: true # doesn't block PRs from being merged if this fails if: github.repository == 'grafana/grafana' strategy: diff --git a/.github/workflows/pr-codeql-analysis-go.yml b/.github/workflows/pr-codeql-analysis-go.yml deleted file mode 100644 index 46645b7fa3f..00000000000 --- a/.github/workflows/pr-codeql-analysis-go.yml +++ /dev/null @@ -1,53 +0,0 @@ -name: "CodeQL for PR / go" - -on: - workflow_dispatch: - pull_request: - branches: [main] - paths: - - '**/*.go' - -permissions: - security-events: write - -jobs: - analyze: - name: Analyze - runs-on: ubuntu-latest - if: github.repository == 'grafana/grafana' - - steps: - - name: "Generate token" - id: generate_token - continue-on-error: true - uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a - with: - app_id: ${{ secrets.GRAFANA_DELIVERY_BOT_APP_ID }} - private_key: ${{ secrets.GRAFANA_DELIVERY_BOT_APP_PEM }} - - - name: Checkout repository - uses: actions/checkout@v4 - with: - # We must fetch at least the immediate parents so that if this is - # a pull request then we can checkout the head. - fetch-depth: 2 - token: ${{ steps.generate_token.outputs.token }} - - - name: Set go version - uses: actions/setup-go@v4 - with: - go-version-file: go.mod - - # Initializes the CodeQL tools for scanning. - - name: Initialize CodeQL - uses: github/codeql-action/init@v3 - with: - languages: "go" - - - name: Build go files - run: | - go mod verify - make build-go - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3