FilesExpand file tree

 trunk

/

codeql.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

49 lines (42 loc) · 1.17 KB

 trunk

/

codeql.yml

Copy path

Top

File metadata and controls

• Code
• Blame

49 lines (42 loc) · 1.17 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

name: Code Scanning

on:

push:

branches: [trunk]

pull_request:

branches: [trunk]

paths-ignore:

- '**/*.md'

schedule:

- cron: "0 0 * * 0"

permissions:

actions: read # for github/codeql-action/init to get workflow details

contents: read # for actions/checkout to fetch code

security-events: write # for github/codeql-action/analyze to upload SARIF results

jobs:

CodeQL-Build:

runs-on: ubuntu-latest

strategy:

fail-fast: false

matrix:

language: ['go', 'actions']

steps:

- name: Check out code

uses: actions/checkout@v4

- name: Setup Go

if: matrix.language == 'go'

uses: actions/setup-go@v5

with:

go-version-file: "go.mod"

- name: Initialize CodeQL

uses: github/codeql-action/init@v3

with:

languages: ${{ matrix.language }}

queries: security-and-quality

config: |

paths-ignore:

- 'third-party/**'

- 'third-party-licenses.*.md'

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@v3

with:

category: "/language:${{ matrix.language }}"