codeql-analysis.yml 903 B

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849
  1. name: "CodeQL"
  2. permissions: read-all
  3. on:
  4. push:
  5. branches: [ main ]
  6. paths:
  7. - '**.js'
  8. - '**.go'
  9. - '!**_test.go'
  10. pull_request:
  11. # The branches below must be a subset of the branches above
  12. branches: [ main ]
  13. paths:
  14. - '**.js'
  15. - '**.go'
  16. - '!**_test.go'
  17. schedule:
  18. - cron: '45 22 * * 3'
  19. jobs:
  20. analyze:
  21. name: Analyze
  22. runs-on: ubuntu-latest
  23. permissions:
  24. actions: read
  25. contents: read
  26. security-events: write
  27. strategy:
  28. fail-fast: false
  29. steps:
  30. - name: Checkout repository
  31. uses: actions/checkout@v5
  32. - uses: actions/setup-go@v5
  33. with:
  34. go-version: stable
  35. - name: Initialize CodeQL
  36. uses: github/codeql-action/init@v3
  37. - name: Autobuild
  38. uses: github/codeql-action/autobuild@v3
  39. - name: Perform CodeQL Analysis
  40. uses: github/codeql-action/analyze@v3