mirror of
https://github.com/github/codeql-action.git
synced 2026-05-07 14:20:19 +00:00
80f8fb8bc7
Co-authored-by: oscarsj <1410188+oscarsj@users.noreply.github.com>
66 lines
3.8 KiB
Markdown
66 lines
3.8 KiB
Markdown
<!--
|
|
For GitHub staff: Remember that this is a public repository. Do not link to internal resources.
|
|
If necessary, link to this PR from an internal issue and include further details there.
|
|
|
|
Everyone: Include a summary of the context of this change, what it aims to accomplish, and why you
|
|
chose the approach you did if applicable. Indicate any open questions you want to answer
|
|
during the review process and anything you want reviewers to pay particular attention to.
|
|
|
|
See https://github.com/github/codeql-action/blob/main/CONTRIBUTING.md for additional information.
|
|
-->
|
|
|
|
### Risk assessment
|
|
|
|
For internal use only. Please select the risk level of this change:
|
|
|
|
- **Low risk:** Changes are fully under feature flags, or have been fully tested and validated in pre-production environments and are highly observable, or are documentation or test only.
|
|
- **High risk:** Changes are not fully under feature flags, have limited visibility and/or cannot be tested outside of production.
|
|
|
|
#### Which use cases does this change impact?
|
|
|
|
<!-- Delete options that don't apply. -->
|
|
|
|
- **Advanced setup** - Impacts users who have custom workflows.
|
|
- **Default setup** - Impacts users who use default setup.
|
|
- **Code Scanning** - Impacts Code Scanning (i.e. `analysis-kinds: code-scanning`).
|
|
- **Code Quality** - Impacts Code Quality (i.e. `analysis-kinds: code-quality`).
|
|
- **Third-party analyses** - Impacts third-party analyses (i.e. `upload-sarif`).
|
|
- **GHES** - Impacts GitHub Enterprise Server.
|
|
|
|
#### How did/will you validate this change?
|
|
|
|
<!-- Delete options that don't apply. Be explicit about test coverage. If no new tests are added, explain why they are not needed. -->
|
|
|
|
- **Test repository** - This change will be tested on a test repository before merging.
|
|
- **Unit tests** - I am depending on existing unit test coverage (i.e. tests in `.test.ts` files).
|
|
- **End-to-end tests** - I am depending on PR checks (i.e. tests in `pr-checks`).
|
|
- **New / updated tests** - I have added or updated unit / end-to-end tests to cover new or changed functionality (summarize below) OR I am providing a justification below for why test updates are not required.
|
|
- **Other** - Please provide details.
|
|
- **None** - I am not validating these changes (provide justification below).
|
|
|
|
<!-- If you selected "New / updated tests" or omitted adding tests, briefly summarize test additions or rationale: -->
|
|
|
|
#### If something goes wrong after this change is released, what are the mitigation and rollback strategies?
|
|
|
|
<!-- Delete strategies that don't apply. -->
|
|
|
|
- **Feature flags** - All new or changed code paths can be fully disabled with corresponding feature flags.
|
|
- **Rollback** - Change can only be disabled by rolling back the release or releasing a new version with a fix.
|
|
- **Other** - Please provide details.
|
|
|
|
#### How will you know if something goes wrong after this change is released?
|
|
|
|
<!-- Delete options that don't apply. -->
|
|
|
|
- **Telemetry** - I rely on existing telemetry or have made changes to the telemetry.
|
|
- **Dashboards** - I will watch relevant dashboards for issues after the release. Consider whether this requires this change to be released at a particular time rather than as part of a regular release.
|
|
- **Alerts** - New or existing monitors will trip if something goes wrong with this change.
|
|
- **Other** - Please provide details.
|
|
|
|
### Merge / deployment checklist
|
|
|
|
- Confirm this change is backwards compatible with existing workflows.
|
|
- Tests (unit and/or end-to-end) have been added or updated as needed and are passing, OR a justification for not adding tests has been provided.
|
|
- Consider adding a [changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) entry for this change.
|
|
- Confirm the [readme](https://github.com/github/codeql-action/blob/main/README.md) and docs have been updated if necessary.
|