40378149073
93%

Ran 26 Oct 2026 06:34PM UTC

Jobs 1

Files 207

Run time 1min

Badge

Embed ▾

Committed 26 Oct 2026 06:29PM UTC coverage: 92.635%. Remained the same

Build # 40378149073

Build Type

push

github

Committed by

web-flow

Commit Message

ci: scan fork pull requests with CodeQL (#220)

Replace default setup with an explicit workflow so fork pull requests
produce the CodeQL results required by the merge ruleset. Default setup
excludes forks, leaving their code scanning gate waiting indefinitely.

Scan Go, Python, and GitHub Actions on pull requests and main pushes,
and schedule weekly scans to refresh results as queries evolve. Allow
manual runs to establish or refresh the main branch baseline.

Build Go packages with the toolchain declared in go.mod. Pin actions to
commit hashes and use the pull_request event so fork analysis can upload
results with a read-only token without privileged fork execution.

Add the setup guide beside the workflow to explain the migration to
advanced setup, baseline verification, and recovery of existing fork
pull requests. Disable default setup during deployment because it blocks
uploads from explicit CodeQL workflows.

Signed-off-by: Devon Bautista <17506592+synackd@users.noreply.github.com>

Coverage Stats

12955 of 13985 relevant lines covered (92.63%)

556.72 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	40378149073.1	26 Oct 2026 06:34PM UTC	207	92.63	GitHub Action Run

OpenCHAMI / ochami / 40378149073
93%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 40378149073

OpenCHAMI / ochami / 40378149073 93%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 40378149073

OpenCHAMI / ochami / 40378149073
93%

README BADGES
x