slsa-verifier icon indicating copy to clipboard operation
slsa-verifier copied to clipboard

remove setup-go from the codeql-analysis workflow

Open ramonpetgrave64 opened this issue 1 year ago • 1 comments

Remove setuo-go from the codeql-analysis.yml workflow. https://github.com/slsa-framework/slsa-verifier/pull/738#discussion_r1462446238

We have added a custom step to the code-ql analysys job, as a workaround to fix the workflow when using go1.21. This issue is a reminder that we should reconsider having that custom step.

      - name: setup-go
        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
        with:
          go-version-file: "go.mod"
          # not needed but gets ride of warnings
          cache: false

ramonpetgrave64 avatar Jan 23 '24 17:01 ramonpetgrave64

The codeql-action issue is tracked at github/codeql-action/issues/1842

ianlewis avatar Jan 24 '24 00:01 ianlewis