From a6b822bbfe52c7a608db7f658d0a5e5613a25992 Mon Sep 17 00:00:00 2001 From: asepharyana Date: Wed, 22 Jul 2026 07:02:25 +0700 Subject: [PATCH] fix: add manual cargo build step for CodeQL Rust analysis The security.yml CodeQL job fails because: 1. The Rust project is in apps/scraper/, not at the repo root 2. CodeQL v4's autobuilder can't find Cargo.toml at the root 3. CodeQL v4 requires the Rust code to be built for analysis Also removes javascript-typescript language since this repo has no JS/TS code. --- .github/workflows/security.yml | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 148768d..5002c24 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -13,8 +13,16 @@ jobs: permissions: security-events: write steps: - - uses: actions/checkout@v6 - - uses: github/codeql-action/init@v3 + - uses: actions/checkout@v7 + with: + fetch-depth: 2 + + - uses: github/codeql-action/init@v4 with: languages: rust - - uses: github/codeql-action/analyze@v3 + + - name: Build Rust project for CodeQL analysis + run: cargo build + working-directory: apps/scraper + + - uses: github/codeql-action/analyze@v4