Repository navigation
Use ephemeral runners for Copilot, and custom config for CodeQL - #24
Conversation
Signed-off-by: Erasmus Cedernaes <erasmus.cedernaes@intel.com>
There was a problem hiding this comment.
Note
Copilot was unable to run its full agentic suite in this review.
Copilot review overview
2 open issues
What changed in this PR
Adds GitHub Actions workflows to enable Copilot-driven code review and to run CodeQL security analysis on the repository.
Changes:
- Introduces a manually-triggered “Copilot Code Review” workflow.
- Adds a CodeQL workflow for pushes/PRs plus a scheduled weekly scan.
- Pins GitHub Actions to specific commit SHAs.
| File | Description |
|---|---|
| .github/workflows/copilot-code-review.yml | Adds a workflow_dispatch workflow that checks out the repo (foundation for Copilot review jobs). |
| .github/workflows/codeql.yml | Adds CodeQL analysis workflow with a language matrix and scheduled execution. |
Review effort: Lite
|
You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool. What Enabling Code Scanning Means:
For more information about GitHub Code Scanning, check out the documentation. |
Signed-off-by: Erasmus Cedernaes <erasmus.cedernaes@intel.com>
Signed-off-by: Erasmus Cedernaes <erasmus.cedernaes@intel.com>
Signed-off-by: Erasmus Cedernaes <erasmus.cedernaes@intel.com>
c337ccd to
e3d13ab
Compare
I think we have to merge the workflow to main before it will "bite" |


No description provided.