ci: Swap CIFuzz and CodeQL to larger runner and improve CodeQL workflow (#16490)

We now have access to larger runners, so move CIFuzz and CodeQL workflows to use
a runner with Ubuntu 22.04 LTS with 32 cores and 128GB RAM.

https://docs.github.com/en/actions/using-github-hosted-runners/using-larger-runners

Additionally, change CodeQL workflow to include recommendations from GitHub CodeQL team.
This commit is contained in:
Reed Loden 2022-09-19 08:46:53 -07:00 committed by GitHub
parent cac726f75a
commit 05323821d8
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 18 additions and 8 deletions

View file

@ -19,7 +19,7 @@ on:
jobs:
fuzzing:
name: Fuzzing
runs-on: ubuntu-latest
runs-on: ubuntu-22.04-32core
permissions:
contents: read

View file

@ -5,9 +5,6 @@ on:
branches:
- master
- branch/*
paths-ignore:
- 'docs/**'
- 'rfd/**'
pull_request:
branches:
- master
@ -15,11 +12,12 @@ on:
paths-ignore:
- 'docs/**'
- 'rfd/**'
- '**.md'
jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
runs-on: ubuntu-22.04-32core
permissions:
actions: read
contents: read
@ -34,15 +32,27 @@ jobs:
- name: Checkout repository
uses: actions/checkout@v3
- name: Initialize CodeQL
- name: Set up Go
uses: actions/setup-go@v3
with:
go-version-file: 'go.mod'
if: ${{ matrix.language == 'go' }}
- name: Initialize the CodeQL tools for scanning
uses: github/codeql-action/init@v2
with:
languages: ${{ matrix.language }}
- name: Autobuild
uses: github/codeql-action/autobuild@v2
if: ${{ matrix.language != 'go' }}
- name: Build Teleport OSS
run: |
make full
if: ${{ matrix.language == 'go' }}
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2
env:
CODEQL_EXTRACTOR_GO_MAX_GOROUTINES: 16
with:
category: "/language:${{matrix.language}}"