FilesExpand file tree

 main

/

codeql-analysis.yaml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

67 lines (56 loc) · 2.71 KB

 main

/

codeql-analysis.yaml

Copy path

Top

File metadata and controls

• Code
• Blame

67 lines (56 loc) · 2.71 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

---

name: CodeQL

on:

pull_request:

branches: [main]

push:

branches: [main]

schedule:

- cron: '07 09 * * 3' # Every Wednesday at 9:07 AM UTC

concurrency:

group: ${{ github.workflow }}-${{ github.event.number || github.ref }}

cancel-in-progress: true

permissions:

contents: read

jobs:

analyze:

name: Analyze

runs-on: ubuntu-latest

permissions:

# required for all workflows

security-events: write

# required to fetch internal or private CodeQL packs

packages: read

# only required for workflows in private repositories

actions: read

contents: read

strategy:

fail-fast: false

matrix:

language: [typescript]

# CodeQL supports the following values keywords for 'language': $supported-codeql-languages

# Use `c-cpp` to analyze code written in C, C++ or both

# Use 'java-kotlin' to analyze code written in Java, Kotlin or both

# Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both

# To learn more about changing the languages that are analyzed or customizing the build mode for your analysis,

# see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning.

# If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how

# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages

steps:

- name: Checkout repository

uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

with:

persist-credentials: false

- name: Initialize CodeQL

uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0

with:

languages: ${{ matrix.language }}

# If you wish to specify custom queries, you can do so here or in a config file.

# By default, queries listed here will override any specified in a config file.

# Prefix the list here with "+" to use these queries and those in the config file.

# For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs

# queries: security-extended,security-and-quality

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0

with:

category: '/language:${{ matrix.language }}'