From c74e18a24fad9bfa2ed401d557d21a1187c9a9f7 Mon Sep 17 00:00:00 2001 From: Jan Goergen Date: Fri, 13 Mar 2026 12:33:43 -0700 Subject: [PATCH 1/2] Switch CodeQL to advanced setup with autobuild for C# Default setup used build-mode 'none' for C# which resulted in low analysis quality (call target resolution 83% vs 85% threshold). Switching to autobuild resolves NuGet dependencies properly. Other languages (JS/TS, Python, Java) remain on build-mode 'none'. Upgraded to security-extended query suite. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/workflows/codeql.yml | 48 ++++++++++++++++++++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..80e5677 --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,48 @@ +name: "CodeQL" + +on: + push: + branches: [main] + pull_request: + branches: [main] + schedule: + - cron: "30 5 * * 1" # Weekly Monday 5:30 UTC + +jobs: + analyze: + name: Analyze (${{ matrix.language }}) + runs-on: ${{ matrix.language == 'csharp' && 'ubuntu-latest' || 'ubuntu-latest' }} + permissions: + security-events: write + packages: read + actions: read + contents: read + + strategy: + fail-fast: false + matrix: + include: + - language: csharp + build-mode: autobuild + - language: java-kotlin + build-mode: none + - language: javascript-typescript + build-mode: none + - language: python + build-mode: none + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v4 + with: + languages: ${{ matrix.language }} + build-mode: ${{ matrix.build-mode }} + queries: security-extended + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v4 + with: + category: "/language:${{ matrix.language }}" From d1727b59c143b39c0df0a2353911733ad9f553b1 Mon Sep 17 00:00:00 2001 From: Jan Goergen Date: Fri, 13 Mar 2026 12:42:26 -0700 Subject: [PATCH 2/2] Add Dependabot config for all package directories Covers 28 directories across 4 ecosystems: - pip (5 Python dirs) - npm (10 JS/TS dirs including @azure/ai-voicelive) - nuget (6 C# dirs) - maven (2 Java dirs) Weekly schedule, voicelive-repo-maintainers as reviewers, language-specific labels for filtering. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/dependabot.yml | 262 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 262 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..861e322 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,262 @@ +version: 2 +updates: + # === Python === + + - package-ecosystem: "pip" + directory: "/python/voice-live-avatar" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "python" + + - package-ecosystem: "pip" + directory: "/python/voice-live-quickstarts" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "python" + + - package-ecosystem: "pip" + directory: "/python/voice-live-quickstarts/AgentsNewQuickstart" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "python" + + - package-ecosystem: "pip" + directory: "/python/voice-live-voicerag-assistant/app/backend" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "python" + + - package-ecosystem: "pip" + directory: "/voice-live-universal-assistant/python" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "python" + + # === JavaScript / npm === + + - package-ecosystem: "npm" + directory: "/javascript/basic-web-voice-assistant" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "javascript" + + - package-ecosystem: "npm" + directory: "/javascript/voice-live-car-demo" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "javascript" + + - package-ecosystem: "npm" + directory: "/javascript/voice-live-interpreter-demo" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "javascript" + + - package-ecosystem: "npm" + directory: "/javascript/voice-live-trader-demo" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "javascript" + + - package-ecosystem: "npm" + directory: "/javascript/voice-live-avatar" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "javascript" + + - package-ecosystem: "npm" + directory: "/javascript/voice-live-quickstarts/ModelQuickstart" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "javascript" + + - package-ecosystem: "npm" + directory: "/javascript/voice-live-quickstarts/AgentsNewQuickstart" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "javascript" + + - package-ecosystem: "npm" + directory: "/voice-live-universal-assistant/javascript" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "javascript" + + - package-ecosystem: "npm" + directory: "/voice-live-universal-assistant/frontend" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "javascript" + + - package-ecosystem: "npm" + directory: "/python/voice-live-voicerag-assistant/app/frontend" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "javascript" + + # === C# / NuGet === + + - package-ecosystem: "nuget" + directory: "/csharp/voice-live-quickstarts/ModelQuickstart" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "csharp" + + - package-ecosystem: "nuget" + directory: "/csharp/voice-live-quickstarts/AgentQuickstart" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "csharp" + + - package-ecosystem: "nuget" + directory: "/csharp/voice-live-quickstarts/BringYourOwnModelQuickstart" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "csharp" + + - package-ecosystem: "nuget" + directory: "/csharp/voice-live-quickstarts/AgentsNewQuickstart" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "csharp" + + - package-ecosystem: "nuget" + directory: "/csharp/CustomerServiceBot" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "csharp" + + - package-ecosystem: "nuget" + directory: "/voice-live-universal-assistant/csharp" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "csharp" + + # === Java / Maven === + + - package-ecosystem: "maven" + directory: "/java/voice-live-quickstarts/ModelQuickstart" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "java" + + - package-ecosystem: "maven" + directory: "/voice-live-universal-assistant/java" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + reviewers: + - "microsoft-foundry/voicelive-repo-maintainers" + labels: + - "dependencies" + - "java"