diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 908c905..9362cb8 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -1,13 +1,13 @@ name: "Code scanning - action" on: - push: - branches-ignore: - - 'dependabot/**' pull_request: schedule: - cron: '0 11 * * 2' +permissions: + security-events: write # Used by this action. + jobs: CodeQL-Build: @@ -25,7 +25,7 @@ jobs: # the head of the pull request instead of the merge commit. - run: git checkout HEAD^2 if: ${{ github.event_name == 'pull_request' }} - + # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL uses: github/codeql-action/init@v3 diff --git a/.github/workflows/modver.yml b/.github/workflows/modver.yml new file mode 100644 index 0000000..1313dd2 --- /dev/null +++ b/.github/workflows/modver.yml @@ -0,0 +1,21 @@ +name: modver + +on: + pull_request: + +permissions: + contents: read # This gets granted by default, so keep granting it. + packages: read # This gets granted by default, so keep granting it. + pull-requests: write # Needed to comment on the PR. + +jobs: + modver: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + with: + fetch-depth: 0 + - uses: bobg/modver@v2.8.1 + with: + github_token: ${{ secrets.GITHUB_TOKEN }} + pull_request_url: https://github.com/${{ github.repository }}/pull/${{ github.event.number }} diff --git a/README.md b/README.md index 8f78424..5850f2d 100644 --- a/README.md +++ b/README.md @@ -49,7 +49,7 @@ Please report bugs by filing an issue with our GitHub issue tracker at ## Copyright and License -This software is Copyright (c) 2023 by MaxMind, Inc. +This software is Copyright (c) 2023 - 2024 by MaxMind, Inc. Much of the code is ported from the XGBoost project, so it is also Copyright (c) 2017-2023 by XGBoost Contributors.