From 87fa3d78c1a6559f33e1b398428cf4fb8fc5c21f Mon Sep 17 00:00:00 2001 From: chaksaray Date: Tue, 21 Jul 2026 22:46:56 +0700 Subject: [PATCH] Trigger CodeQL and Scorecard on push to develop too Both previously only ran on push to main. Since develop is where work actually lands first, scanning stopped there meant a window between merge to develop and the next develop-to-main sync where new code had no CodeQL or Scorecard coverage at all. --- .github/workflows/codeql.yml | 2 +- .github/workflows/scorecard.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index c6338f8..7d3ee0e 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -2,7 +2,7 @@ name: "CodeQL" on: push: - branches: ["main"] + branches: ["main", "develop"] pull_request: branches: ["main"] schedule: diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 8a64b59..2b33ff5 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -5,7 +5,7 @@ on: schedule: - cron: "30 1 * * 6" push: - branches: ["main"] + branches: ["main", "develop"] permissions: read-all