Skip to content

Bump @octokit/plugin-retry from 6.0.1 to 7.1.0 #76

Bump @octokit/plugin-retry from 6.0.1 to 7.1.0

Bump @octokit/plugin-retry from 6.0.1 to 7.1.0 #76

name: Verify CodeQL Usage
on:
pull_request: {}
permissions:
contents: read
pull-requests: write
security-events: read
jobs:
verify:
name: Verify CodeQL Usage
runs-on: ubuntu-latest
steps:
- name: Validate CodeQL Usage
uses: department-of-veterans-affairs/codeql-tools/verify-codeql-usage@main
with:
message_codeql_missing: |
Your repository is not in compliance with OIS requirements for CodeQL usage.
Your repository is not using CodeQL but has been identified as a repository required to perform code-scanning using CodeQL. If this pull request adds CodeQL to your repository, please ignore this message.
Please refer to OIS guidance for configuring CodeQL using the OIS approved libraries: https://department-of-veterans-affairs.github.io/ois-swa-wiki/docs/ghas/codeql-usage
If you have additional questions about this comment, please open a ticket here: https://github.com/department-of-veterans-affairs/github-user-requests/issues/new/choose
message_old_analysis: |
Your repository is not in compliance with OIS requirements for CodeQL usage.
Your repositories default branch has not been scanned in the last 7 days. Please update your automation to run CodeQL analysis at least once weekly.
Please refer to OIS guidance for configuring CodeQL: https://department-of-veterans-affairs.github.io/ois-swa-wiki/docs/ghas/codeql-usage
message_unapproved_libraries: |
Your repository is not in compliance with OIS requirements for CodeQL usage.
Your repository is using CodeQL, but not using OIS approved code-scanning libraries.
Please refer to OIS guidance for configuring CodeQL using the OIS approved libraries: https://department-of-veterans-affairs.github.io/ois-swa-wiki/docs/ghas/codeql-usage
If you have additional questions about this comment, please open a ticket here: https://github.com/department-of-veterans-affairs/github-user-requests/issues/new/choose