codeql.yml 1.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445
  1. name: "CodeQL Advanced"
  2. on:
  3. push:
  4. pull_request:
  5. schedule:
  6. - cron: '18 2 * * 2'
  7. jobs:
  8. analyze:
  9. name: Analyze (${{ matrix.language }})
  10. runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
  11. env:
  12. CODEQL_ACTION_FILE_COVERAGE_ON_PRS: true
  13. permissions:
  14. security-events: write
  15. packages: read
  16. actions: read
  17. contents: read
  18. strategy:
  19. fail-fast: false
  20. matrix:
  21. include:
  22. - language: actions
  23. build-mode: none
  24. - language: go
  25. build-mode: autobuild
  26. - language: javascript-typescript
  27. build-mode: none
  28. steps:
  29. - name: Checkout repository
  30. uses: actions/checkout@v6
  31. - name: Initialize CodeQL
  32. uses: github/codeql-action/init@v4
  33. with:
  34. languages: ${{ matrix.language }}
  35. build-mode: ${{ matrix.build-mode }}
  36. - name: Perform CodeQL Analysis
  37. uses: github/codeql-action/analyze@v4
  38. with:
  39. category: "/language:${{matrix.language}}"