QVAC-22747 infra: add weekly schedule to the CodeScan caller - #23
Open
GSServita wants to merge 1 commit into
Open
QVAC-22747 infra: add weekly schedule to the CodeScan caller#23GSServita wants to merge 1 commit into
GSServita wants to merge 1 commit into
Conversation
The canonical CodeScan baseline currently runs on push/PR only, so the QVAC-19056 commitment to a weekly scan is unmet. Add a scheduled cron (staggered per repo across the fleet) alongside the existing push / pull_request / workflow_dispatch triggers. No other change.
Review StatusCurrent Status: ❌ PENDING Pending reviews: Needs 1 Management or Team Lead, and 1 more from Management, Team Lead, or Member. |
GSServita
marked this pull request as ready for review
July 27, 2026 09:34
Proletter
approved these changes
Jul 27, 2026
Proletter
left a comment
Proletter
left a comment
There was a problem hiding this comment.
QVAC-19056 rollout — approved.
GHA audit clean: pinned to qvac-actions 0.2.0 (SHA + version comment), explicit least-privilege permissions, plain pull_request, concurrency set. Weekly cron slot (Sun 07:00) is unique across the fleet — no collisions.
— Reviewed via qv-devops-pr-review (agent-assisted).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
🎯 What problem does this PR solve?
security-baseline.yml) runs onpush/pull_request/workflow_dispatchonly, so the QVAC-19056 commitment to a weekly scan is currently unmet on this repo.📝 How does it solve it?
schedule:cron alongside the existing triggers. Crons are staggered across weekdays per repo to spread scheduled-run load across the fleet.🧪 How was it tested?
actionlintclean.workflow_dispatchcan smoke-test it immediately).