Merge pull request #157 from JupiterOne/SRE-1589

SRE-1589 remove codeql

.github/workflows/backend_deployment_pr.yaml

@@ -47,16 +47,3 @@ jobs:
       # Not all deployments build code
       - if: ${{ inputs.use-build }}
         run: npm run build
-  security:
-    name: Security
-    runs-on: scaleset-jupiterone-infra-amd64
-    permissions:
-      actions: read
-      security-events: write
-      contents: read
-    steps:
-      - uses: actions/checkout@v3
-      - name: security
-        uses: jupiterone/.github/.github/actions/[email protected]
-        with:
-          language: ${{ inputs.language }}

.github/workflows/docs/frontend/frontend_npm_pr.md

@@ -41,10 +41,8 @@ jobs:
 graph LR;
     A[start flow];
     B[validate];
-    C[security];
 
     A --> B;
-    A --> C;
 ```
 
 ### With Chromatic
@@ -69,10 +67,8 @@ graph LR;
     A[start flow];
     B[validate];
     C[chromatic_upload];
-    D[security];
 
     A --> B;
     A --> C;
-    A --> D;
 ```
 

.github/workflows/docs/frontend/frontend_npm_release.md

@@ -46,12 +46,10 @@ graph LR;
     B[validate];
     C[release];
     D[cortex];
-    E[security];
 
     A --> B;
     B --> C;
     B --> D;
-    A --> E;
 ```
 
 ### With Chromatic
@@ -79,11 +77,9 @@ graph LR;
     C[chromatic_publish]
     D[release];
     E[cortex];
-    F[security];
 
     A --> B;
     B --> C;
     B --> D;
     B --> E;
-    A --> F;
 ```

.github/workflows/docs/frontend/frontend_runtime_application_pr.md

@@ -48,11 +48,9 @@ graph LR;
     B[migration_number];
     C[magic_url];
     D[validate];
-    E[security];
 
     A --> B;
     A --> D;
-    A --> E;
     B --> C;
 ```
 
@@ -81,13 +79,11 @@ graph LR;
     C[magic_url];
     D[validate];
     E[chromatic_upload];
-    F[security];
     G[pr_comment]
 
     A --> B;
     A --> D;
     A --> E;
     B --> C;
-    A --> F;
     A --> G;
 ```

.github/workflows/docs/frontend/frontend_runtime_deploy.md

@@ -44,11 +44,10 @@ jobs:
 ```mermaid
 graph LR;
     A[start flow];
-    B[security];
     C[validate];
     D[cortex];
 
-    A --> B;
+    A;
     A --> C --> D;
 ```
 
@@ -73,12 +72,10 @@ jobs:
 ```mermaid
 graph LR;
     A[start flow];
-    B[security];
     C[validate];
     D[cortex];
     E[chromatic_publish];
 
-    A --> B;
     A --> C;
     C --> D;
     C --> E;

.github/workflows/docs/frontend/frontend_runtime_utility_pr.md

@@ -44,12 +44,10 @@ graph LR;
     B[migration_number];
     C[magic_url];
     D[validate];
-    E[security];
     F[pr_comment];
 
     A --> B;
     A --> D;
-    A --> E;
     B --> C;
     A --> F;
 ```
@@ -78,12 +76,10 @@ graph LR;
     C[magic_url];
     D[validate];
     E[chromatic_upload];
-    F[security];
 
     A --> B;
     A --> D;
     A --> E;
-    A --> F;
     B --> C;
 ```
 

.github/workflows/docs/provision_only_pr.md

@@ -39,9 +39,7 @@ jobs:
 graph LR;
     A[start flow];
     B[validate];
-    C[security];
 
     A --> B;
-    A --> C;
 ```
 

.github/workflows/docs/provision_only_release.md

@@ -40,11 +40,9 @@ jobs:
 graph LR;
     A[start flow];
     B[validate];
-    C[security];
     D[version_artifact];
 
     A --> B;
-    A --> C;
     B --> D;
 ```
 

.github/workflows/frontend_npm_pr.yml

@@ -47,19 +47,6 @@ jobs:
       - name: build
         uses: jupiterone/.github/.github/actions/[email protected]
 
-  security:
-    runs-on: ${{ (inputs.fallback_runner && 'ubuntu-latest') || 'scaleset-jupiterone-infra-amd64' }}
-    permissions:
-      actions: read
-      security-events: write
-      contents: read
-    steps:
-      - uses: actions/checkout@v3
-      - name: security
-        uses: jupiterone/.github/.github/actions/[email protected]
-        with:
-          language: 'javascript'
-
   chromatic_upload:
     # Name targeted by branch protections, do not change
     name: Visual Regression

.github/workflows/frontend_npm_release.yml

@@ -53,19 +53,6 @@ jobs:
       - name: build
         uses: jupiterone/.github/.github/actions/[email protected]
 
-  security:
-    runs-on: ${{ (inputs.fallback_runner && 'ubuntu-latest') || 'scaleset-jupiterone-infra-amd64' }}
-    permissions:
-      actions: read
-      security-events: write
-      contents: read
-    steps:
-      - uses: actions/checkout@v3
-      - name: security
-        uses: jupiterone/.github/.github/actions/[email protected]
-        with:
-          language: 'javascript'
-
   chromatic_publish:
     runs-on: ${{ (inputs.fallback_runner && 'ubuntu-latest') || 'scaleset-jupiterone-infra-arm64' }}
     needs: validate
@@ -115,4 +102,4 @@ jobs:
       - name: cortex
         uses: jupiterone/.github/.github/actions/frontend/[email protected]
         with:
-          cortex_api_key: ${{ secrets.CORTEX_API_KEY }}
+          cortex_api_key: ${{ secrets.CORTEX_API_KEY }}

.github/workflows/frontend_runtime_application_pr.yml

@@ -72,19 +72,6 @@ jobs:
       - name: validate
         uses: jupiterone/.github/.github/actions/[email protected]
 
-  security:
-    runs-on: ${{ (inputs.fallback_runner && 'ubuntu-latest') || 'scaleset-jupiterone-infra-amd64' }}
-    permissions:
-      actions: read
-      security-events: write
-      contents: read
-    steps:
-      - uses: actions/checkout@v3
-      - name: security
-        uses: jupiterone/.github/.github/actions/[email protected]
-        with:
-          language: 'javascript'
-
   chromatic_upload:
     # Name targeted by branch protections, do not change
     name: Visual Regression

.github/workflows/frontend_runtime_deploy.yml

@@ -43,19 +43,6 @@ jobs:
         uses: jupiterone/.github/.github/actions/[email protected]
       - name: build
         uses: jupiterone/.github/.github/actions/[email protected]
-
-  security:
-    runs-on: ${{ (inputs.fallback_runner && 'ubuntu-latest') || 'scaleset-jupiterone-infra-amd64' }}
-    permissions:
-      actions: read
-      security-events: write
-      contents: read
-    steps:
-      - uses: actions/checkout@v3
-      - name: security
-        uses: jupiterone/.github/.github/actions/[email protected]
-        with:
-          language: 'javascript'
 
   chromatic_publish:
     runs-on: ${{ (inputs.fallback_runner && 'ubuntu-latest') || 'scaleset-jupiterone-infra-arm64' }}

.github/workflows/frontend_runtime_utility_pr.yml

@@ -70,19 +70,6 @@ jobs:
       - name: remote_types_tests
         uses: jupiterone/.github/.github/actions/frontend/runtime/[email protected]
 
-  security:
-    runs-on: ${{ (inputs.fallback_runner && 'ubuntu-latest') || 'scaleset-jupiterone-infra-amd64' }}
-    permissions:
-      actions: read
-      security-events: write
-      contents: read
-    steps:
-      - uses: actions/checkout@v3
-      - name: security
-        uses: jupiterone/.github/.github/actions/[email protected]
-        with:
-          language: 'javascript'
-
   chromatic_upload:
     # Name targeted by branch protections, do not change
     name: Visual Regression

.github/workflows/provision_only_pr.yml

@@ -35,16 +35,3 @@ jobs:
       - uses: hashicorp/setup-terraform@v2
       - name: validate
         uses: jupiterone/.github/.github/actions/[email protected]
-
-  security:
-    runs-on: ${{ (inputs.fallback_runner && 'ubuntu-latest') || 'scaleset-jupiterone-infra-amd64' }}
-    permissions:
-      actions: read
-      security-events: write
-      contents: read
-    steps:
-      - uses: actions/checkout@v3
-      - name: security
-        uses: jupiterone/.github/.github/actions/[email protected]
-        with:
-          language: 'javascript'

.github/workflows/provision_only_release.yml

@@ -38,19 +38,6 @@ jobs:
       - uses: hashicorp/setup-terraform@v2
       - name: validate
         uses: jupiterone/.github/.github/actions/[email protected]
-
-  security:
-    runs-on: ${{ (inputs.fallback_runner && 'ubuntu-latest') || 'scaleset-jupiterone-infra-amd64' }}
-    permissions:
-      actions: read
-      security-events: write
-      contents: read
-    steps:
-      - uses: actions/checkout@v3
-      - name: security
-        uses: jupiterone/.github/.github/actions/[email protected]
-        with:
-          language: 'javascript'
 
   version_artifact:
     runs-on: ${{ (inputs.fallback_runner && 'ubuntu-latest') || 'scaleset-jupiterone-infra-amd64' }}

.github/workflows/test/frontend_npm_pr.test.ts

@@ -34,11 +34,6 @@ test('validate inputs and secrets', async () => {
   const chromatic_inputs = getTestResult({ results, name: 'chromatic_inputs' });
 
   expect(chromatic_inputs.output).toContain(`chromatic_project_token=***`);
-
-  // code_ql
-  const code_ql_inputs = getTestResult({ results, name: 'code_ql_inputs' });
-
-  expect(code_ql_inputs.output).toContain(`language=javascript`);
 });
 
 test('default flow', async () => {
@@ -51,7 +46,7 @@ test('default flow', async () => {
     'security'
   ] });
 
-  expect(jobs_found.length).toEqual(2);
+  expect(jobs_found.length).toEqual(1);
 });
 
 test('when use_chromatic is true', async () => {