fix(workflows): add packages: read permission to update-codeql-version.yml#163

Merged

felickz merged 14 commits into

mainfrom

fix/update-codeql-version-packages-read

Jul 10, 2026

Commits on Jul 10, 2026

fix(workflows): add packages: read permission to update-codeql-version.yml

felickz
and
Copilot
committed
debug: temporary step to inspect codeql resolve qlpacks output
felickz
committed
debug: test gh-codeql bundle install + qlpacks disk layout
felickz
committed
debug: point directly at gh-codeql bundle unpack dir
felickz
committed
debug: search go dir + resolve qlpacks with bundle codeql binary
felickz
committed
debug: try codeql-action codeql-bundle release asset
felickz
committed
debug: list all qlpacks dir entries via tar tzf without extraction
felickz
committed
fix(workflows): pin codeql/* library deps to the CLI-bundle version before upgrade
felickz
committed
chore: mark pin-codeql-library-versions.sh executable
felickz
committed
fix(workflows): exclude ql/hotspots from the pack-upgrade loop
felickz
committed
fix(workflows): gitignore the downloaded codeql_home CLI install dir
felickz
committed
docs(contributing): document exact-pinning of codeql/* dependencies
felickz
committed
fix(workflows): exclude codeql_home from qlpack.yml discovery loops
felickz
committed
fix(pin-script): make library-version pinning idempotent across CLI bumps

felickz
and
Copilot
committed