FilesExpand file tree

 main

/

codeql.yml

Copy path

View Runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

49 lines (42 loc) · 1.33 KB

 main

/

codeql.yml

Copy path

Top

File metadata and controls

• Code
• Blame

49 lines (42 loc) · 1.33 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

# SPDX-License-Identifier: MPL-2.0

name: CodeQL Security Analysis

on:

push:

branches: [main, master]

pull_request:

branches: [main, master]

schedule:

- cron: '0 6 * * 1'

# Estate guardrail: cancel superseded runs so re-pushes / rebased PR

# updates do not pile up queued runs against the shared account-wide

# Actions concurrency pool. Applied only to read-only check workflows

# (no publish/mutation), so cancelling a superseded run is always safe.

concurrency:

group: ${{ github.workflow }}-${{ github.ref }}

cancel-in-progress: true

permissions:

contents: read

jobs:

analyze:

runs-on: ubuntu-latest

permissions:

contents: read

security-events: write

strategy:

fail-fast: false

matrix:

include:

- language: actions

build-mode: none

steps:

- name: Checkout

uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Initialize CodeQL

uses: github/codeql-action/init@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3

with:

languages: ${{ matrix.language }}

build-mode: ${{ matrix.build-mode }}

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3

with:

category: "/language:${{ matrix.language }}"