A Composite Action that runs CodeQL to Analyze a .NET 8 Library
Required The URL of the Private NuGet Repository (e.g. https://nuget.pkg.github.com/myname/index.json)
Required The Token used for Authentication with the Private NuGet Repository
uses: ricado-group/dotnet-library-codeql-action@v1
with:
private-nuget-url: 'https://nuget.pkg.github.com/myname/index.json'
private-nuget-token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
Use Dependabot to update your GitHub Actions by creating a .github/dependabot.yml
file:
version: 2
updates:
# Maintain Dependencies for GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"