GitHub Actions Workflows

Overview

This page documents reusable GitHub Actions workflows shared across Network Pro repositories. These modular components simplify enforcement of common DevOps practices like security scanning, linting, publishing, and deployment.

---

✅ check-codeql.yml

Purpose

Enforces that the most recent CodeQL workflow has completed successfully before continuing any deploy or publish steps.

Location

.github/workflows/check-codeql.yml

Required Permissions in Caller

permissions:
  actions: read
  contents: read

Usage

jobs:
  check-codeql:
    uses: ./.github/workflows/check-codeql.yml

  build:
    needs: check-codeql
    ...

Behavior

• The job uses gh run list to query the latest CodeQL run in the same repository.
• It fails if the status is not success, blocking further execution.
• No additional inputs or outputs are required.

Notes

• Uses ${GITHUB_REPOSITORY} internally to determine the correct context — no customization needed.
• Enforces hard fail on CLI errors or invalid CodeQL status.