Bump uuid from 10.0.0 to 14.0.0 in /blackhorse-kgraph/backend in the npm_and_yarn group across 1 directory #77
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # CodeQL Analysis Workflow | |
| # | |
| # This workflow performs security analysis using CodeQL for Python code. | |
| # Runs on standard GitHub-hosted runners. | |
| # | |
| # See: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-with-codeql | |
| name: CodeQL Security Analysis | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - develop | |
| pull_request: | |
| branches: | |
| - main | |
| - develop | |
| schedule: | |
| # Run weekly on Mondays at 00:00 UTC | |
| - cron: '0 0 * * 1' | |
| workflow_dispatch: | |
| jobs: | |
| analyze: | |
| name: Analyze Python Code | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read | |
| contents: read | |
| # security-events: write # not needed if we don't upload to code scanning | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| language: ['python'] | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Set up Python | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.11' | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v3 | |
| with: | |
| languages: ${{ matrix.language }} | |
| # Specify CodeQL query packs | |
| queries: security-and-quality | |
| # Install dependencies for analysis (helps CodeQL understand imports) | |
| - name: Install dependencies | |
| run: | | |
| python -m pip install --upgrade pip | |
| pip install -r requirements.txt || echo "No requirements.txt yet" | |
| continue-on-error: true | |
| - name: Perform CodeQL Analysis (no code scanning upload) | |
| uses: github/codeql-action/analyze@v3 | |
| with: | |
| category: "/language:${{ matrix.language }}" | |
| upload: "false" # <— key change: do not upload to code scanning | |
| # Optional: archive SARIF as a plain artifact | |
| - name: Upload SARIF artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: codeql-sarif | |
| path: results/**/*.sarif |