fix(ci): use server-side apply in deploy script to bypass CRD annotat… #374

	name: CodeQL

	"on":
	push:
	branches:
	- main
	paths:
	- ".github/workflows/**"
	- "Makefile"
	- "**"
	- "proto/**"
	- "tests/conformance-harness/**"
	pull_request:
	branches:
	- main
	paths:
	- ".github/workflows/**"
	- "Makefile"
	- "**"
	- "proto/**"
	- "tests/conformance-harness/**"
	schedule:
	- cron: "23 3 * * 1"
	workflow_dispatch:

	permissions:
	actions: read
	contents: read
	security-events: write

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	analyze:
	if: ${{ !github.event.repository.private \|\| vars.ENABLE_PRIVATE_CODEQL == 'true' }}
	name: Analyze (go)
	runs-on: ubuntu-latest
	timeout-minutes: 45

	steps:
	- name: Checkout
	uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10

	- name: Set up Go
	uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16
	with:
	go-version-file: go.mod
	cache-dependency-path: \|
	go.sum
	tests/conformance-harness/go.sum

	- name: Install Go build dependencies
	run: \|
	sudo apt-get update
	sudo apt-get install -y --no-install-recommends protobuf-compiler libprotobuf-dev

	- name: Initialize CodeQL
	uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
	with:
	languages: go
	build-mode: manual

	- name: Build Go targets for analysis
	env:
	GOPROXY: https://proxy.golang.org,direct
	GODEBUG: http2client=0
	run: go build ./...

	- name: Analyze
	uses: github/codeql-action/analyze@411bbbe57033eedfc1a82d68c01345aa96c737d7
	with:
	category: /language:go

Provide feedback