update codeql config

.github/workflows/build.yml

@@ -13,6 +13,7 @@ on:
     paths-ignore:
     - '**/*.md'
     - '.github/*.yml'
+    - '.github/workflows/codeql-analysis.yml'
   pull_request:
   workflow_dispatch:
     # https://github.blog/changelog/2020-07-06-github-actions-manual-triggers-with-workflow_dispatch/

.github/workflows/codeql-analysis.yml

@@ -9,6 +9,7 @@ on:
     - '**'
     paths-ignore:
     - '**/*.md'
+    - '.github/workflows/build.yml'
   pull_request:
     paths-ignore:
     - '**/*.md'
@@ -21,6 +22,9 @@ defaults:
   run:
     shell: bash
 
+env:
+  PYTHON_VERSION: "3.10"
+  
 jobs:
   analyze:
     name: Analyze
@@ -34,19 +38,22 @@ jobs:
 
     - uses: actions/setup-python@v2
       with:
-        python-version: "3.10"
+        python-version: "${{ env.PYTHON_VERSION }}"
 
     - name: Install python dependencies
       run: |
-         set -eux
+        set -eux
 
-         python --version
+        python --version
 
-         pip install .[dev]
-         
-         # Set the `CODEQL-PYTHON` environment variable to the Python executable
-         # that includes the dependencies
-         echo "CODEQL_PYTHON=$(which python)" >> $GITHUB_ENV
+        pip install pdm
+
+        # don't install dependencies for now, as this makes CodeQL run forever
+        # pdm install -v
+
+        # Set the `CODEQL-PYTHON` environment variable to the Python executable
+        # that includes the dependencies
+        echo "CODEQL_PYTHON=$(which python)" >> $GITHUB_ENV
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v1