Skip to content

ci(codeql): scan fork pull requests with an advanced setup - #833

Open
rickstaa wants to merge 1 commit into
mainfrom
ci/codeql-advanced
Open

rickstaa wants to merge 1 commit into
mainfrom
ci/codeql-advanced

Conversation

@rickstaa

@rickstaa rickstaa commented Oct 6, 2026

Copy link
Copy Markdown
Member

Replaces CodeQL default setup with GitHub's advanced setup template so pull requests from forks are scanned too. Default setup excludes fork PRs, which left them permanently blocked by the "Require code scanning results" rule. The only change from the template is adding next to the branch filters, since that branch's ruleset also requires code scanning results. Default setup must be disabled when this merges.

Default setup skips pull requests from forks, so the code scanning
rule could never pass for external contributors.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Copilot AI balanced review requested due to automatic review settings October 6, 2026 16:22
@vercel

vercel Bot commented Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
explorer-arbitrum-one Ready Ready Preview Oct 6, 2026 4:23pm UTC

Request Review

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The workflow is valid, uses current action versions, and both analysis jobs completed successfully.

Review effort: Balanced
Findings: None

What changed in this PR

Adds advanced CodeQL scanning so fork pull requests and changes targeting next receive required code-scanning results.

Changes:

  • Scans GitHub Actions and JavaScript/TypeScript.
  • Runs on pushes, pull requests, and a weekly schedule.
File Description
.github/​workflows/​codeql.yml Adds the advanced CodeQL workflow and branch triggers.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

This branch was successfully deployed

1 active deployment
Preview — 37809aef Deployed Oct 6, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants