google / google/github-team

Cannot run CodeQL via required workflows

Open
#5 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
8
Forks
8
PR merge metrics
No merged PRs in 30d

Description

```
The following actions are not allowed to be used inside a required workflow: github/codeql-action/analyze@v3, github/codeql-action/init@v3
```

Reading [GH Docs](https://docs.github.com/en/enterprise-server@3.11/actions/sharing-automations/required-workflows#restrictions-and-behaviors-for-the-source-repository)

> CodeQL is not supported in required workflows because CodeQL requires configuration at the repository level.

Which generally is true, but in this case we're actually fine.

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the linked GitHub documentation on required-workflow restrictions and the repository's workflow configuration. Determine why the CodeQL actions are rejected here despite the stated repository-level configuration, and verify that the required workflow can run CodeQL successfully without the restriction error.

Written by the indexing model from the issue text.

Assessment

Tech stack
github
Domain
ci-cd, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.