Merge branch 'g-maintenance' into 'develop'

CodeQL workflow config for Hivemind (security and quality)

See merge request !512

.github/codeql-config.yml

+name: "CodeQL config for Hivemind"
+
+languages: python
+
+queries:
+  - name: Extended Security
+    uses: security-extended
+  - name: Security and Quality
+    uses: security-and-quality
+  - name: CodeQL repository
+    uses: github/codeql/python/ql/src/codeql-suites/python-code-scanning.qls@v1.27.0

.github/workflows/codeql-analysis.yml

@@ -3,11 +3,6 @@ name: "CodeQL"
 on:
   push:
     branches: [ develop, g-maintenance ]
-  pull_request:
-    # The branches below must be a subset of the branches above
-    branches: [ develop ]
-  schedule:
-    - cron: '37 18 * * 3'
 
 jobs:
   analyze:
@@ -27,42 +22,23 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v2
+    - run: git fetch --prune --unshallow
     
     - name: Set up Python ${{ matrix.python-version }}
       uses: actions/setup-python@v2
       with:
         python-version: ${{ matrix.python-version }}
 
-    - name: Install
+    - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
         python -m pip install -e .[dev]
 
-    # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v1
       with:
         languages: ${{ matrix.language }}
-        # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file.
-        # Prefix the list here with "+" to use these queries and those in the config file.
-        # queries: ./path/to/local/query, your-org/your-repo/queries@main
-
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
-
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 https://git.io/JvXDl
-
-    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
-    #    and modify them (or add more) to build your code if your project
-    #    uses a compiled language
-
-    #- run: |
-    #   make bootstrap
-    #   make release
+        config-file: ./.github/codeql-config.yml
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v1