Skip to content

Use ephemeral runners for Copilot, and custom config for CodeQL - #24

Merged
emanuelen5 merged 4 commits into
mainfrom
emaus/ephemeral-runners
Nov 6, 2026
Merged

emanuelen5 merged 4 commits into
mainfrom
emaus/ephemeral-runners

Conversation

@emanuelen5

Copy link
Copy Markdown
Contributor

No description provided.

Signed-off-by: Erasmus Cedernaes <erasmus.cedernaes@intel.com>
@emanuelen5 emanuelen5 self-assigned this Nov 6, 2026
@emanuelen5
emanuelen5 requested a balanced review from Copilot November 6, 2026 08:32

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note

Copilot was unable to run its full agentic suite in this review.

Copilot review overview

2 open issues
What changed in this PR

Adds GitHub Actions workflows to enable Copilot-driven code review and to run CodeQL security analysis on the repository.

Changes:

  • Introduces a manually-triggered “Copilot Code Review” workflow.
  • Adds a CodeQL workflow for pushes/PRs plus a scheduled weekly scan.
  • Pins GitHub Actions to specific commit SHAs.
File Description
.github/​workflows/​copilot-code-review.yml Adds a workflow_dispatch workflow that checks out the repo (foundation for Copilot review jobs).
.github/​workflows/​codeql.yml Adds CodeQL analysis workflow with a language matrix and scheduled execution.

Review effort: Lite

Comment thread .github/workflows/codeql.yml Resolved
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

Signed-off-by: Erasmus Cedernaes <erasmus.cedernaes@intel.com>
Signed-off-by: Erasmus Cedernaes <erasmus.cedernaes@intel.com>
Signed-off-by: Erasmus Cedernaes <erasmus.cedernaes@intel.com>
@emanuelen5
emanuelen5 force-pushed the emaus/ephemeral-runners branch from c337ccd to e3d13ab Compare November 6, 2026 08:38
@emanuelen5
emanuelen5 marked this pull request as ready for review November 6, 2026 08:38
@emanuelen5
emanuelen5 requested a review from a team as a code owner November 6, 2026 08:38
@emanuelen5
emanuelen5 enabled auto-merge (rebase) November 6, 2026 08:49
@emanuelen5

Copy link
Copy Markdown
Contributor Author

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

I think we have to merge the workflow to main before it will "bite"

@MagnusIntel MagnusIntel left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks

@emanuelen5
emanuelen5 disabled auto-merge November 6, 2026 08:58
@emanuelen5
emanuelen5 merged commit 533645d into main Nov 6, 2026
5 checks passed
@emanuelen5
emanuelen5 deleted the emaus/ephemeral-runners branch November 6, 2026 08:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants