Skip to content

ci: migrate CodeQL workflow to codeql-action v4 - #464

Open
ppicom wants to merge 1 commit into
mainfrom
ci/codeql-action-v4
Open

ppicom wants to merge 1 commit into
mainfrom
ci/codeql-action-v4

Conversation

@ppicom

@ppicom ppicom commented Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

Description

The CodeQL workflow used github/codeql-action@v1, which is deprecated (changelog).

  • github/codeql-action/init and analyze move from @v1 to @v4.
  • The autobuild step is removed and init sets build-mode: none, which is the recommended mode for Python.
  • actions/checkout moves from @v2 to @v4, matching the other workflows.
  • analyze sets category: "/language:python", as in GitHub's current template.
  • The template comments are removed.

Triggers, schedule, permissions and the language matrix are unchanged.

Type of change

CI only. No change to the SDK.

How Has This Been Tested?

  • The workflow file parses as valid YAML.
  • The CodeQL job on this PR passes and results show up under the Security tab.

@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues block the CodeQL workflow update.

No open issues 🎉

What changed in this PR

Modernizes the Python SDK’s CodeQL workflow without changing SDK code, triggers, schedule, permissions, or the language matrix.

Changes:

  • Upgrades CodeQL actions from v1 to v4 and checkout from v2 to v4.
  • Replaces autobuild with build-mode: none for Python analysis.
  • Adds a language-specific analysis category and removes template comments.
File Description
.github/​workflows/​codeql-analysis.yml Updates action versions and simplifies Python CodeQL scanning configuration.

Review effort: Balanced

@alexanto alexanto left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🙌

@github-project-automation github-project-automation Bot moved this from New to Approved PRs in Issues and PRs Oct 29, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Approved PRs

Development

Successfully merging this pull request may close these issues.

4 participants