From ad54a3cb51731154b8f014f4217364a2dd6cfb14 Mon Sep 17 00:00:00 2001 From: Brendan Walsh Date: Tue, 31 Mar 2026 04:45:46 +0000 Subject: [PATCH] ci: expand CodeQL SAST coverage to all active branches Ensure CodeQL analysis runs on pushes to all active branches (master and spark3.5) to satisfy OpenSSF Scorecard SAST check requirements. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/workflows/codeql.yml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 616775e96a4..ae180dd10f5 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -13,11 +13,10 @@ name: "CodeQL" on: push: - branches: [ "master" ] + branches: [ "master", "spark3.5", "spark4.0", "spark4.1" ] paths-ignore: [ "**.md" ] pull_request: - # The branches below must be a subset of the branches above - branches: [ "master" ] + branches: [ "master", "spark3.5", "spark4.0", "spark4.1" ] paths-ignore: [ "**.md" ] schedule: - cron: '17 7 * * 3'