Skip to content

chore: add CodeQL Advanced workflow#112

Merged
marandaneto merged 1 commit intomasterfrom
chore/add-codeql-workflow
Mar 30, 2026
Merged

chore: add CodeQL Advanced workflow#112
marandaneto merged 1 commit intomasterfrom
chore/add-codeql-workflow

Conversation

@marandaneto
Copy link
Copy Markdown
Member

@marandaneto marandaneto commented Mar 30, 2026

Problem

The CodeQL org action is failing https://github.com/PostHog/posthog-php/security/code-scanning/tools/Wiz%20SAST%20Scanner/status/configurations/api/c6f1d974aba4f4bf3609ec56b7404f44d8a37c54eeccf0a9a0d23ca2d0dcd014
This is enforced and I cant merge PRs, PHP isnt supported so adding a custom codeql action
Blocking PR #102

Changes

Adds a .github/workflows/codeql.yml workflow that:

  • Scans GitHub Actions workflows (actions language) via CodeQL
  • Runs on push/PR to master and weekly on a schedule
  • Mirrors the setup used in posthog-python
  • Uses pinned CodeQL action versions (v4.31.9) with TRAP caching disabled

Note: PHP is not a CodeQL-supported language, so only the actions language is included in the matrix.

@marandaneto marandaneto requested review from a team March 30, 2026 08:55
@marandaneto marandaneto merged commit 2596167 into master Mar 30, 2026
12 checks passed
@marandaneto marandaneto deleted the chore/add-codeql-workflow branch March 30, 2026 09:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants