From: William Leuschner <william@isc.org>
Date: Thu, 26 Feb 2026 16:04:12 +0000 (-0500)
Subject: [#4369] Update checkout@v6; use build-mode: none
X-Git-Tag: Kea-3.1.7~21
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=efb03df79ccc5a845539e8a6fa924eb9f0c2f3cf;p=thirdparty%2Fkea.git

[#4369] Update checkout@v6; use build-mode: none

GitHub now supports CodeQL scans of C and C++ code without building
the executable.

https://github.blog/changelog/2025-10-14-codeql-scanning-rust-and-c-c-without-builds-is-now-generally-available/
---

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 5a739525b5..a40014722a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -21,25 +21,18 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'cpp', 'python' ]
+        language: [ 'cpp', 'python', 'actions' ]
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      # Was v6.0.2 as of 2026-02-26.
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd 
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
-
-    - name: Install dependencies
-      run: |
-        ./hammer.py prepare-system -p local -w all
-
-    - name: Build Kea
-      run: |
-        meson setup build --auto-features enabled -D fuzz=enabled -D tests=enabled -D cpp_std=c++20
-        meson compile -C build
+        build-mode: none
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v4