From 5fd71b2050bf6361db761db94a62c1a39470a158 Mon Sep 17 00:00:00 2001 From: Arvind Shyamsundar <16342666+arvindshmicrosoft@users.noreply.github.com> Date: Mon, 30 Mar 2026 21:15:21 -0700 Subject: [PATCH 1/2] Enhance CodeQL workflow with build and schedule Added scheduled analysis and build steps for CodeQL. --- .github/workflows/codeql-analyze.yml | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql-analyze.yml b/.github/workflows/codeql-analyze.yml index aeee593..e8f273e 100644 --- a/.github/workflows/codeql-analyze.yml +++ b/.github/workflows/codeql-analyze.yml @@ -4,6 +4,8 @@ on: branches: [ "main" ] pull_request: branches: [ "main" ] + schedule: + - cron: '25 14 * * 1' workflow_dispatch: jobs: analyze: @@ -23,7 +25,13 @@ jobs: with: languages: 'csharp' queries: security-extended,security-and-quality - - name: Autobuild - uses: github/codeql-action/autobuild@v3 + - name: Add msbuild to PATH + uses: microsoft/setup-msbuild@v2 + - name: Setup NuGet + uses: NuGet/setup-nuget@v2 + - name: Restore NuGet Packages + run: nuget restore SQLCallStackResolver.sln + - name: Build + run: msbuild SQLCallStackResolver.sln /p:Configuration=Release - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v3 From 12d8779f554e0e62b657bf87f0b20dbc14eb9fce Mon Sep 17 00:00:00 2001 From: Arvind Shyamsundar <16342666+arvindshmicrosoft@users.noreply.github.com> Date: Mon, 30 Mar 2026 21:25:27 -0700 Subject: [PATCH 2/2] Upgrade CodeQL actions to latest versions Updated CodeQL workflow to use newer action versions. --- .github/workflows/codeql-analyze.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/codeql-analyze.yml b/.github/workflows/codeql-analyze.yml index e8f273e..5b603af 100644 --- a/.github/workflows/codeql-analyze.yml +++ b/.github/workflows/codeql-analyze.yml @@ -19,19 +19,19 @@ jobs: fail-fast: false steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4 with: languages: 'csharp' queries: security-extended,security-and-quality - name: Add msbuild to PATH - uses: microsoft/setup-msbuild@v2 + uses: microsoft/setup-msbuild@v3 - name: Setup NuGet - uses: NuGet/setup-nuget@v2 + uses: NuGet/setup-nuget@v3 - name: Restore NuGet Packages run: nuget restore SQLCallStackResolver.sln - name: Build run: msbuild SQLCallStackResolver.sln /p:Configuration=Release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4