Workflows - run CodeQL and ADR report publishing after main workflow (#…

…199)

* CodeQL - Remove pull_request trigger

* Dependabot - check for .net and GH action updates weekly

* workflows - run codeql & adr after dotnet workflow on main
otherwise the test results workflow may attach the report to the wrong workflow
see dorny/test-reporter#67

.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+
+updates:
+  - package-ecosystem: "dotnet"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/codeql.yml

@@ -1,10 +1,11 @@
 name: "Code Scanning - Action"
-
 on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
+  workflow_run:
+    workflows: ['.NET'] # runs after .NET workflow
+    types:
+      - completed
+    branches:
+      - 'main'
 
 jobs:
   CodeQL-Build:

.github/workflows/publish-log4brains.yml

@@ -1,8 +1,11 @@
 name: Publish Log4brains
 on:
-  push:
+  workflow_run:
+    workflows: ['.NET'] # runs after .NET workflow
+    types:
+      - completed
     branches:
-      - main
+      - 'main'
 jobs:
   build-and-publish:
     runs-on: ubuntu-latest