250603.2 · e692243489eeee10ccbe4dc9f24e9b7aa926bb57
gh: fix codeql analysis
reading declarations
.github/workflows/codeql-analysis.yml
@@ -3,7 +3,7 @@ name: CodeQL on: push:- branches: [ master, devel ]+ branches: [ master ] pull_request: branches: [ master ] paths-ignore:@@ -12,8 +12,15 @@ on: - '**/*.json' workflow_dispatch: +permissions:+ contents: read+ jobs: analyze:+ permissions:+ actions: read # for github/codeql-action/init to get workflow details+ contents: read # for actions/checkout to fetch code+ security-events: write # for github/codeql-action/autobuild to send a status report name: Analyze runs-on: ubuntu-latest
@@ -1,5 +1,5 @@ .PHONY: all-all: test test_build+all: test .PHONY: test_build_darwin_arm64 test_build_darwin_arm64: