From 9efaaeefc4c5fc742e7439b58df3d725d2418467 Mon Sep 17 00:00:00 2001
From: "Michael B. Gale" <mbg@github.com>
Date: Fri, 25 Sep 2026 16:50:42 +0100
Subject: [PATCH] Add `ubuntu-24.04-arm` to `build-codeql` matrix

---
 .github/workflows/ci.yml | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8a46e656..93f5e044 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -62,7 +62,7 @@ jobs:
       - run: go vet ./...
 
   # The `github/codeql-action/start-proxy` action uses native binaries for
-  # Linux, macOS, and Windows.
+  # Linux (x86 and arm64), macOS, and Windows.
   build-codeql:
     name: Build (${{ matrix.os }})
     runs-on: ${{ matrix.os }}
@@ -74,6 +74,9 @@ jobs:
           - ubuntu-latest
           - macos-latest
           - windows-latest
+          # There's no `ubuntu-latest-arm`; `24.04` matches the version used by `ubuntu-latest`
+          # at the time of writing.
+          - ubuntu-24.04-arm
 
     permissions:
       contents: read
@@ -103,13 +106,17 @@ jobs:
       - name: Set output name
         id: platform
         shell: bash
+        env:
+          MATRIX_OS: ${{ matrix.os }}
         run: |
-          if [[ "${{ matrix.os }}" == "ubuntu-latest" ]]; then
+          if [[ "$MATRIX_OS" == "ubuntu-latest" ]]; then
             echo "name=linux64" >> $GITHUB_OUTPUT;
-          elif [[ "${{ matrix.os }}" == "macos-latest" ]]; then
+          elif [[ "$MATRIX_OS" == "macos-latest" ]]; then
             echo "name=osx64" >> $GITHUB_OUTPUT;
-          elif [[ "${{ matrix.os }}" == "windows-latest" ]]; then
+          elif [[ "$MATRIX_OS" == "windows-latest" ]]; then
             echo "name=win64" >> $GITHUB_OUTPUT;
+          elif [[ "$MATRIX_OS" == "ubuntu-24.04-arm" ]]; then
+            echo "name=linux-arm64" >> $GITHUB_OUTPUT;
           fi
 
       - name: Compress binary artifact