codeql.yml 1.1 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243
  1. name: "CodeQL"
  2. on:
  3. push:
  4. branches: [ "main", "feature" ]
  5. pull_request:
  6. branches: [ "main", "feature" ]
  7. schedule:
  8. - cron: '38 16 * * 4'
  9. jobs:
  10. analyze:
  11. name: Analyze (${{ matrix.language }})
  12. runs-on: ubuntu-latest
  13. permissions:
  14. contents: read
  15. security-events: write
  16. strategy:
  17. fail-fast: false
  18. matrix:
  19. include:
  20. - language: actions
  21. build-mode: none
  22. - language: javascript-typescript
  23. build-mode: none
  24. - language: python
  25. build-mode: none
  26. steps:
  27. - name: Checkout repository
  28. uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
  29. - name: Initialize CodeQL
  30. uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
  31. with:
  32. languages: ${{ matrix.language }}
  33. build-mode: ${{ matrix.build-mode }}
  34. config-file: .github/codeql/codeql-config.yml
  35. - name: Perform CodeQL Analysis
  36. uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
  37. with:
  38. category: "/language:${{matrix.language}}"