codeql.yml 888 B

12345678910111213141516171819202122232425262728293031323334353637383940
  1. name: "CodeQL"
  2. on:
  3. push:
  4. branches: [main]
  5. pull_request:
  6. branches: [main]
  7. schedule:
  8. - cron: '0 6 * * 1'
  9. permissions:
  10. contents: read
  11. jobs:
  12. analyze:
  13. name: Analyze (${{ matrix.language }})
  14. runs-on: ubuntu-latest
  15. permissions:
  16. security-events: write
  17. strategy:
  18. fail-fast: false
  19. matrix:
  20. language: [python, javascript-typescript, actions]
  21. steps:
  22. - name: Checkout repository
  23. uses: actions/checkout@v6
  24. - name: Initialize CodeQL
  25. uses: github/codeql-action/init@v4
  26. with:
  27. languages: ${{ matrix.language }}
  28. config-file: ./.codeql/codeql-config.yml
  29. - name: Autobuild
  30. uses: github/codeql-action/autobuild@v4
  31. - name: Perform CodeQL Analysis
  32. uses: github/codeql-action/analyze@v4
  33. with:
  34. category: "/language:${{ matrix.language }}"