| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748 |
- name: "CodeQL"
- on:
- push:
- branches: [ "dev" ]
- pull_request:
- # The branches below must be a subset of the branches above
- branches: [ "dev" ]
- schedule:
- - cron: '29 23 * * 0'
- workflow_dispatch:
- permissions:
- contents: read
- jobs:
- analyze:
- name: Analyze
- runs-on: ubuntu-latest
- permissions:
- actions: read
- contents: read
- security-events: write
- strategy:
- fail-fast: false
- matrix:
- language: [ 'javascript' ]
- steps:
- - name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
- # Initializes the CodeQL tools for scanning.
- - name: Initialize CodeQL
- uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
- with:
- languages: ${{ matrix.language }}
- config-file: ./.github/codeql-config.yml
- queries: security-and-quality
- - name: Autobuild
- uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
- - name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
- with:
- category: "/language:${{matrix.language}}"
|
