FilesExpand file tree

 main

/

codeql.yml

Copy path

View Runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

46 lines (40 loc) · 1.23 KB

 main

/

codeql.yml

Copy path

Top

File metadata and controls

• Code
• Blame

46 lines (40 loc) · 1.23 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

# SPDX-FileCopyrightText: Copyright (c) 2024-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.

#

# SPDX-License-Identifier: Apache-2.0

name: "Static Analysis: CodeQL Scan"

on:

push:

branches:

- "pull-request/[0-9]+"

- "ctk-next"

- "main"

concurrency:

group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}

cancel-in-progress: true

jobs:

analyze:

name: Analyze (${{ matrix.language }})

runs-on: ubuntu-latest

permissions:

actions: read

contents: read

security-events: write

strategy:

fail-fast: false

matrix:

include:

- language: python

build-mode: none

steps:

- name: Checkout repository

uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

- name: Initialize CodeQL

uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1

with:

languages: ${{ matrix.language }}

build-mode: ${{ matrix.build-mode }}

queries: security-extended

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1

with:

category: "/language:${{matrix.language}}"