Bump toml from 0.9.12+spec-1.1.0 to 1.1.4+spec-1.1.0 #18
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CodeQL | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| schedule: | |
| - cron: "24 7 * * 3" | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: codeql-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| rust: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 30 | |
| permissions: | |
| security-events: write | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| # CodeQL's Rust extractor only supports build-mode `none` (source | |
| # analysis, no compilation) -- `manual`/`autobuild` both fail init | |
| # outright with "Rust does not support the manual build mode." | |
| - uses: github/codeql-action/init@6f5948dfacef28e207b48d0905cf90c03365536d # v3.37.9 | |
| with: | |
| languages: rust | |
| build-mode: none | |
| - uses: github/codeql-action/analyze@6f5948dfacef28e207b48d0905cf90c03365536d # v3.37.9 | |
| with: | |
| category: "/language:rust" | |
| swift: | |
| # The FinderSync/FileProvider shell extension has no .xcodeproj (see | |
| # shell-ext/macos/YadoriLinkFinderSync/build.sh's header for why); its | |
| # embedded Rust core links via `swiftc` directly, so this needs the | |
| # same manual build as that script, on a real Xcode-equipped runner. | |
| runs-on: macos-latest | |
| # The FinderSync extension link (Rust staticlib + bridging header) is | |
| # the expensive step and finishes in ~10min; but the second, much | |
| # simpler swiftc invocation for the trivial host-app main.swift has | |
| # been observed hanging past 19min under CodeQL's DYLD_INSERT_LIBRARIES | |
| # tracer specifically (no such issue building outside CodeQL). Generous | |
| # timeout is a diagnostic, not a fix -- if this still doesn't complete, | |
| # the tracer/swiftc interaction needs its own investigation. | |
| timeout-minutes: 60 | |
| permissions: | |
| security-events: write | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0 | |
| with: | |
| repo-token: ${{ github.token }} | |
| - uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master @ 2026-06-30 | |
| with: | |
| toolchain: stable | |
| - uses: github/codeql-action/init@6f5948dfacef28e207b48d0905cf90c03365536d # v3.37.9 | |
| with: | |
| languages: swift | |
| build-mode: manual | |
| - name: Build FinderSync host app + extension | |
| run: DEVELOPER_DIR="$(xcode-select -p)" ./shell-ext/macos/YadoriLinkFinderSync/build.sh | |
| - uses: github/codeql-action/analyze@6f5948dfacef28e207b48d0905cf90c03365536d # v3.37.9 | |
| with: | |
| category: "/language:swift" | |
| actions: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| permissions: | |
| security-events: write | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - uses: github/codeql-action/init@6f5948dfacef28e207b48d0905cf90c03365536d # v3.37.9 | |
| with: | |
| languages: actions | |
| - uses: github/codeql-action/analyze@6f5948dfacef28e207b48d0905cf90c03365536d # v3.37.9 | |
| with: | |
| category: "/language:actions" | |
| python: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| permissions: | |
| security-events: write | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - uses: github/codeql-action/init@6f5948dfacef28e207b48d0905cf90c03365536d # v3.37.9 | |
| with: | |
| languages: python | |
| - uses: github/codeql-action/analyze@6f5948dfacef28e207b48d0905cf90c03365536d # v3.37.9 | |
| with: | |
| category: "/language:python" |