Skip to content

chore(training configuration): Display only dependent parameters in the trained model learning parameters [PART 17] #8769

chore(training configuration): Display only dependent parameters in the trained model learning parameters [PART 17]

chore(training configuration): Display only dependent parameters in the trained model learning parameters [PART 17] #8769

Workflow file for this run

name: "CodeQL scan"
on:
schedule:
- cron: "0 0 * * *"
push:
branches: ["develop", "release/**"]
pull_request:
branches: ["develop", "release/**"]
permissions: {}
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
jobs:
check_paths:
name: Check which language should be analyzed by CodeQL
runs-on: ubuntu-latest
if: github.event_name == 'pull_request'
outputs:
run_python: "${{ steps.prepare_outputs.outputs.run_python }}"
run_javascript_typescript: "${{ steps.prepare_outputs.outputs.run_javascript_typescript }}"
run_actions: "${{ steps.prepare_outputs.outputs.run_actions }}"
run_rust: "${{ steps.prepare_outputs.outputs.run_rust }}"
steps:
- &checkout
name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- name: Get all paths that should trigger the workflow
id: changed-files-yaml
uses: tj-actions/changed-files@22103cc46bda19c2b464ffe86db46df6922fd323 # v47.0.5
with:
files_yaml: |
python:
- application/backend/**
- library/**
rust:
- application/ui/**
javascript-typescript:
- application/ui/**
actions:
- .github/**
- name: Prepare outputs
id: prepare_outputs
env:
PYTHON_ANY_CHANGED: ${{ steps.changed-files-yaml.outputs.python_any_changed }}
JAVASCRIPT_ANY_CHANGED: ${{ steps.changed-files-yaml.outputs.javascript-typescript_any_changed }}
ACTIONS_ANY_CHANGED: ${{ steps.changed-files-yaml.outputs.actions_any_changed }}
RUST_ANY_CHANGED: ${{ steps.changed-files-yaml.outputs.rust_any_changed }}
run: |
echo "PYTHON_ANY_CHANGED=$PYTHON_ANY_CHANGED"
if [ "$PYTHON_ANY_CHANGED" = "true" ]; then
echo "run_python=true" >> "$GITHUB_OUTPUT"
else
echo "run_python=false" >> "$GITHUB_OUTPUT"
fi
echo "JAVASCRIPT_ANY_CHANGED=$JAVASCRIPT_ANY_CHANGED"
if [ "$JAVASCRIPT_ANY_CHANGED" = "true" ]; then
echo "run_javascript_typescript=true" >> "$GITHUB_OUTPUT"
else
echo "run_javascript_typescript=false" >> "$GITHUB_OUTPUT"
fi
echo "ACTIONS_ANY_CHANGED=$ACTIONS_ANY_CHANGED"
if [ "$ACTIONS_ANY_CHANGED" = "true" ]; then
echo "run_actions=true" >> "$GITHUB_OUTPUT"
else
echo "run_actions=false" >> "$GITHUB_OUTPUT"
fi
echo "RUST_ANY_CHANGED=$RUST_ANY_CHANGED"
if [ "$RUST_ANY_CHANGED" = "true" ]; then
echo "run_rust=true" >> "$GITHUB_OUTPUT"
else
echo "run_rust=false" >> "$GITHUB_OUTPUT"
fi
analyze:
name: Analyze (${{ matrix.language }})
runs-on: ubuntu-latest
permissions:
security-events: write # required to publish sarif
needs: check_paths
strategy:
fail-fast: false
matrix:
include:
- language: actions
run: ${{ needs.check_paths.outputs.run_actions || 'true' }}
- language: python
run: ${{ needs.check_paths.outputs.run_python || 'true' }}
- language: javascript-typescript
run: ${{ needs.check_paths.outputs.run_javascript_typescript || 'true' }}
- language: rust
run: ${{ needs.check_paths.outputs.run_rust || 'true' }}
steps:
- *checkout
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
if: ${{ matrix.run == 'true' }}
with:
languages: ${{ matrix.language }}
build-mode: none
queries: security-extended
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
if: ${{ matrix.run == 'true' }}
with:
category: "/language:${{matrix.language}}"