FilesExpand file tree

 main

/

codeql.yml

Copy path

View Runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

43 lines (37 loc) · 1.17 KB

 main

/

codeql.yml

Copy path

Top

File metadata and controls

• Code
• Blame

43 lines (37 loc) · 1.17 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

# SPDX-FileCopyrightText: Copyright (c) 2024-2025 NVIDIA CORPORATION & AFFILIATES. All rights reserved.

#

# SPDX-License-Identifier: Apache-2.0

name: "Static Analysis: CodeQL Scan"

on:

push:

branches:

- "pull-request/[0-9]+"

- "main"

concurrency:

group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}

cancel-in-progress: true

jobs:

analyze:

name: Analyze (${{ matrix.language }})

runs-on: ubuntu-latest

permissions:

security-events: write

strategy:

fail-fast: false

matrix:

include:

- language: python

build-mode: none

steps:

- name: Checkout repository

uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Initialize CodeQL

uses: github/codeql-action/init@f985be5b50bd175586d44aac9ac52926adf12893 # v3.31.8

with:

languages: ${{ matrix.language }}

build-mode: ${{ matrix.build-mode }}

queries: security-extended

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@f985be5b50bd175586d44aac9ac52926adf12893 # v3.31.8

with:

category: "/language:${{matrix.language}}"