codeql.yml 1.1 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
  1. name: "CodeQL Advanced"
  2. on:
  3. push:
  4. tags-ignore:
  5. - "v*"
  6. pull_request:
  7. schedule:
  8. - cron: "18 2 * * 2"
  9. jobs:
  10. analyze:
  11. name: Analyze (${{ matrix.language }})
  12. runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
  13. env:
  14. CODEQL_ACTION_FILE_COVERAGE_ON_PRS: true
  15. permissions:
  16. security-events: write
  17. packages: read
  18. actions: read
  19. contents: read
  20. strategy:
  21. fail-fast: false
  22. matrix:
  23. include:
  24. - language: actions
  25. build-mode: none
  26. - language: go
  27. build-mode: autobuild
  28. - language: javascript-typescript
  29. build-mode: none
  30. steps:
  31. - name: Checkout repository
  32. uses: actions/checkout@v6
  33. - name: Initialize CodeQL
  34. uses: github/codeql-action/init@v4
  35. with:
  36. languages: ${{ matrix.language }}
  37. build-mode: ${{ matrix.build-mode }}
  38. - name: Perform CodeQL Analysis
  39. uses: github/codeql-action/analyze@v4
  40. with:
  41. category: "/language:${{matrix.language}}"