codeql.yml 1.0 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546
  1. name: CodeQL
  2. on:
  3. push:
  4. branches: ['**']
  5. pull_request:
  6. branches: ['**']
  7. schedule:
  8. # Run weekly on Sunday at 3:00 UTC
  9. - cron: '0 3 * * 0'
  10. # Cancel in-progress runs for the same branch
  11. concurrency:
  12. group: ${{ github.workflow }}-${{ github.ref }}
  13. cancel-in-progress: true
  14. permissions:
  15. contents: read
  16. security-events: write
  17. jobs:
  18. analyze:
  19. name: Analyze
  20. runs-on: ubuntu-latest
  21. strategy:
  22. fail-fast: false
  23. matrix:
  24. language: ['javascript-typescript', 'python']
  25. steps:
  26. - name: Checkout repository
  27. uses: actions/checkout@v4
  28. - name: Initialize CodeQL
  29. uses: github/codeql-action/init@v4
  30. with:
  31. languages: ${{ matrix.language }}
  32. # Use default queries plus security-extended
  33. queries: security-extended
  34. - name: Autobuild
  35. uses: github/codeql-action/autobuild@v4
  36. - name: Perform CodeQL Analysis
  37. uses: github/codeql-action/analyze@v4
  38. with:
  39. category: '/language:${{ matrix.language }}'