Tune CodeQL settings

.github/workflows/ci.yml

@@ -1,5 +1,6 @@
 name: GitHub Actions CI
 
+
 on:
   push:
     branches: [main]
@@ -11,7 +12,7 @@ jobs:
     env:
       GITHUB_TEST_ORGANIZATION: 'kfcampbell-terraform-provider'
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/[email protected]
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
         with:
           go-version-file: 'go.mod'

.github/workflows/codeql.yml

@@ -1,4 +1,4 @@
-name: CodeQL
+name: CodeQL new
 
 on:
   push:
@@ -11,7 +11,7 @@ on:
 
 jobs:
   analyze:
-    name: Analyze
+    name: Analyze (${{ matrix.language }})
     runs-on: ubuntu-latest
     permissions:
       actions: read
@@ -21,13 +21,30 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'go' ]
+        include:
+        - language: actions
+          build-mode: none
+          queries: security-and-quality
+          config: |
+            paths:
+              - ".github/workflows"
+            paths-ignore:
+              - "**/*.md"
+        - language: go
+          build-mode: autobuild
+          queries: ''
+          config: |
+            paths-ignore:
+              - "**/*.md"     
 
     steps:
       - name: Checkout repository
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          ref: ${{ github.head_ref }}
 
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
+        if: matrix.language == 'go'
         with:
           go-version-file: 'go.mod'
           cache: true
@@ -37,6 +54,10 @@ jobs:
         uses: github/codeql-action/init@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
         with:
           languages: ${{ matrix.language }}
+          build-mode: ${{ matrix['build-mode'] }}
+          queries: ${{ matrix.queries }}
+          config: ${{ matrix.config }}
+          debug: true
 
       - name: Autobuild
         uses: github/codeql-action/autobuild@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0

.gitignore

@@ -29,6 +29,7 @@ website/node_modules
 testdata/
 website/vendor
 terraform-provider-github
+.tool-versions
 
 # Test exclusions
 !command/test-fixtures/**/*.tfstate