codeql-analysis.yml 859 B

123456789101112131415161718192021222324252627282930313233343536373839404142
  1. name: "CodeQL"
  2. permissions: read-all
  3. on:
  4. push:
  5. branches: [ main ]
  6. pull_request:
  7. # The branches below must be a subset of the branches above
  8. branches: [ main ]
  9. schedule:
  10. - cron: '45 22 * * 3'
  11. jobs:
  12. analyze:
  13. name: Analyze
  14. runs-on: ubuntu-latest
  15. permissions:
  16. actions: read
  17. contents: read
  18. security-events: write
  19. strategy:
  20. fail-fast: false
  21. matrix:
  22. language: [ 'go', 'javascript' ]
  23. steps:
  24. - name: Checkout repository
  25. uses: actions/checkout@v3
  26. - name: Initialize CodeQL
  27. uses: github/codeql-action/init@v2
  28. with:
  29. languages: ${{ matrix.language }}
  30. config-file: ./.github/codeql/config.yml
  31. - name: Autobuild
  32. uses: github/codeql-action/autobuild@v2
  33. - name: Perform CodeQL Analysis
  34. uses: github/codeql-action/analyze@v2