codeql.yml 979 B

123456789101112131415161718192021222324252627282930313233343536373839404142
  1. name: "CodeQL"
  2. on:
  3. push:
  4. branches: [ "main", "feature" ]
  5. pull_request:
  6. branches: [ "main", "feature" ]
  7. schedule:
  8. - cron: '38 16 * * 4'
  9. jobs:
  10. analyze:
  11. name: Analyze (${{ matrix.language }})
  12. runs-on: ubuntu-latest
  13. permissions:
  14. security-events: write
  15. strategy:
  16. fail-fast: false
  17. matrix:
  18. include:
  19. - language: actions
  20. build-mode: none
  21. - language: javascript-typescript
  22. build-mode: none
  23. - language: python
  24. build-mode: none
  25. steps:
  26. - name: Checkout repository
  27. uses: actions/checkout@v4
  28. - name: Initialize CodeQL
  29. uses: github/codeql-action/init@v3
  30. with:
  31. languages: ${{ matrix.language }}
  32. build-mode: ${{ matrix.build-mode }}
  33. config-file: .github/codeql/codeql-config.yml
  34. - name: Perform CodeQL Analysis
  35. uses: github/codeql-action/analyze@v3
  36. with:
  37. category: "/language:${{matrix.language}}"