Merge pull request #32346 from github/repo-sync

Repo sync

content/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages.md

@@ -110,8 +110,8 @@ steps:
     - name: Initialize CodeQL
       uses: {% data reusables.actions.action-codeql-action-init %}
       with:
-        languages: ${{ matrix.language }}
-    - if: ${{ matrix.build-mode == 'manual' }}
+        languages: {% raw %}${{ matrix.language }}{% endraw %}
+    - if: {% raw %}${{ matrix.build-mode == 'manual' }}{% endraw %}
       name: Build C and C++ code
       run: |
         echo 'If you are using a "manual" build mode for one or more of the' \

content/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning.md

@@ -31,12 +31,14 @@ Default setup for {% data variables.product.prodname_code_scanning %} is the qui
 - When creating or committing to a pull request based against the repository's default branch, or any protected branch.{% ifversion default-setup-scan-on-schedule %}
 - On a weekly schedule.
 
+{% ifversion code-scanning-default-setup-exclude-dormant-repos %}
 {% note %}
 
 **Note:** If no pushes and pull requests have occurred in a repository with default setup enabled for 6 months, the weekly schedule will be disabled to save your {% data variables.product.prodname_actions %} minutes.
 
 {% endnote %}
 {% endif %}
+{% endif %}
 
 {% ifversion org-enable-code-scanning %}You can also enable default setup for multiple or all repositories in an organization at the same time. For information on bulk enablement, see "[AUTOTITLE](/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale)."{% endif %}
 

data/features/code-scanning-default-setup-exclude-dormant-repos.yml

@@ -0,0 +1,6 @@
+# Exclude "dormant repos" from running scheduled runs via default setup
+# See code-scanning ref:13220
+versions:
+  fpt: '*'
+  ghec: '*'
+  ghes: '<3.13'