Possible fix for dependabot issues and add CodeQL workflow (#2606)

.github/workflows/build.yaml

@@ -1,13 +1,18 @@
 name: Build binaries
 
 on:
+  pull_request_target:
   pull_request:
   push:
     branches:
       - master
     tags:
       - "v*"
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
 jobs:
   build:
     name: Build binaries for ${{ matrix.platform.name }}-${{ matrix.arch }}
@@ -155,15 +160,9 @@ jobs:
         uses: actions/setup-go@v3
         with:
           go-version: 1.17
-
-      - name: Cache go modules
-        id: cache-go-mod
-        uses: actions/[email protected]
-        with:
-          path: ~/go/pkg/mod
-          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
-          restore-keys: |
-            ${{ runner.os }}-go-
+          go-version-file: go.mod
+          cache: true
+          cache-dependency-path: go.sum
 
       - name: Cache ffmpeg
         id: cache-ffmpeg
@@ -198,7 +197,7 @@ jobs:
             && sudo ldconfig
 
       - name: Install go modules
-        if: steps.cache-go-mod.outputs.cache-hit != 'true'
+        if: steps.go.outputs.cache-hit != 'true'
         run: go mod download
 
       - name: Install ffmpeg

.github/workflows/docker.yaml

@@ -1,13 +1,18 @@
 name: Docker build
 
 on:
+  pull_request_target:
   pull_request:
   push:
     branches:
       - master
     tags:
       - "v*"
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
 jobs:
   build:
     name: Docker image generation
@@ -45,8 +50,8 @@ jobs:
       - name: Login to DockerHub
         uses: docker/login-action@v2
         with:
-          username: ${{ secrets.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_PASS }}
+          username: ${{ secrets.CI_DOCKERHUB_USERNAME }}
+          password: ${{ secrets.CI_DOCKERHUB_TOKEN }}
 
       - name: Log in to the Container registry
         uses: docker/login-action@v2

.github/workflows/test.yaml

@@ -1,13 +1,20 @@
 name: Trigger test suite
 
 on:
+  pull_request_target:
+    branches:
+      - master
   pull_request:
     branches:
       - master
   push:
     branches:
       - master
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
 jobs:
   test:
     name: Run tests defined for the project
@@ -26,15 +33,9 @@ jobs:
         uses: actions/setup-go@v3
         with:
           go-version: 1.17
-
-      - name: Cache go modules
-        id: cache-go-mod
-        uses: actions/cache@v3
-        with:
-          path: ~/go/pkg/mod
-          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
-          restore-keys: |
-            ${{ runner.os }}-go-
+          go-version-file: go.mod
+          cache: true
+          cache-dependency-path: go.sum
 
       - name: Cache ffmpeg
         id: cache-ffmpeg
@@ -58,7 +59,7 @@ jobs:
             && sudo update-alternatives --install /usr/bin/clang clang /usr/bin/clang-8 30
 
       - name: Install go modules
-        if: steps.cache-go-mod.outputs.cache-hit != 'true'
+        if: steps.go.outputs.cache-hit != 'true'
         run: go mod download
 
       - name: Install ffmpeg
@@ -93,6 +94,30 @@ jobs:
         uses: codecov/codecov-action@v3
         with:
           files: ./cover.out
-          name: go-livepeer
+          name: ${{ github.event.repository.name }}
           verbose: true
           gcov_ignore: ./eth/stubclient.go
+
+  codeql:
+    name: Perform CodeQL analysis
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out code
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+          # Check https://github.com/livepeer/go-livepeer/pull/1891
+          # for ref value discussion
+          ref: ${{ github.event.pull_request.head.sha }}
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          languages: go
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v2
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2