codeql.yml 1.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566
  1. name: "CodeQL Advanced"
  2. on:
  3. push:
  4. branches:
  5. - main
  6. tags-ignore:
  7. - "v*"
  8. paths:
  9. - "**.go"
  10. - "go.mod"
  11. - "go.sum"
  12. - "frontend/**"
  13. schedule:
  14. - cron: "18 2 * * 2"
  15. jobs:
  16. analyze:
  17. name: Analyze (${{ matrix.language }})
  18. runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
  19. permissions:
  20. security-events: write
  21. packages: read
  22. actions: read
  23. contents: read
  24. strategy:
  25. fail-fast: false
  26. matrix:
  27. include:
  28. - language: actions
  29. build-mode: none
  30. - language: go
  31. build-mode: autobuild
  32. - language: javascript-typescript
  33. build-mode: none
  34. steps:
  35. - name: Checkout repository
  36. uses: actions/checkout@v7
  37. - name: Setup Node.js
  38. if: matrix.language == 'go'
  39. uses: actions/setup-node@v7
  40. with:
  41. node-version-file: .nvmrc
  42. cache: 'npm'
  43. cache-dependency-path: frontend/package-lock.json
  44. - name: Build frontend bundle
  45. if: matrix.language == 'go'
  46. run: |
  47. npm ci
  48. npm run build
  49. working-directory: frontend
  50. - name: Initialize CodeQL
  51. uses: github/codeql-action/init@v4
  52. with:
  53. languages: ${{ matrix.language }}
  54. build-mode: ${{ matrix.build-mode }}
  55. - name: Perform CodeQL Analysis
  56. uses: github/codeql-action/analyze@v4
  57. with:
  58. category: "/language:${{matrix.language}}"