Skip to content

Comments

docs: guidance on keeping the CodeQL Action up to date#3499

Open
sam-robson wants to merge 1 commit intomainfrom
sam-robson/document-version-pinning-risk
Open

docs: guidance on keeping the CodeQL Action up to date#3499
sam-robson wants to merge 1 commit intomainfrom
sam-robson/document-version-pinning-risk

Conversation

@sam-robson
Copy link

Summary

  • Document the recommendation to use major version tags when referencing the CodeQL Action
  • Note that pinned versions should be kept updated to avoid losing functionality from server-side feature flag changes

Copilot AI review requested due to automatic review settings February 20, 2026 20:33
@sam-robson sam-robson requested a review from a team as a code owner February 20, 2026 20:33
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds documentation to the README about keeping the CodeQL Action up to date. The new section provides guidance on version pinning strategies and warns about potential functionality loss when using pinned versions with server-side feature flag changes.

Changes:

  • Added a new "Keeping the CodeQL Action up to date" section to README.md
  • Documented the recommendation to use major version tags (e.g., v3) for automatic updates
  • Added guidance for users who pin to specific commit SHAs or patch versions
  • Explained that server-side feature flags may be removed over time, affecting pinned versions

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant