FilesExpand file tree

 main

/

codeql.yaml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

85 lines (72 loc) · 2.27 KB

 main

/

codeql.yaml

Copy path

Top

File metadata and controls

• Code
• Blame

85 lines (72 loc) · 2.27 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

# Copyright The Conforma Contributors

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

#

# http://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an "AS IS" BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and

# limitations under the License.

#

# SPDX-License-Identifier: Apache-2.0

---

name: "CodeQL"

"on":

pull_request:

branches:

- main

push:

branches:

- main

schedule:

- cron: '35 3 * * 4'

permissions:

contents: read

jobs:

analyze:

name: Analyze

runs-on: ubuntu-latest

permissions:

actions: read

contents: read

security-events: write

strategy:

fail-fast: false

matrix:

language:

- go

steps:

- name: Harden Runner

uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1

with:

egress-policy: audit

disable-telemetry: true

- name: Checkout repository

uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Restore Cache

uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4

with:

key: main

path: '**'

- name: Setup Go environment

uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0

with:

go-version-file: go.mod

cache: false

- name: Download go dependencies

run: |

go mod download

(cd tools && go mod download)

(cd acceptance && go mod download)

- name: Initialize CodeQL

uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6

with:

languages: ${{ matrix.language }}

- name: Autobuild

uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6