Skip to content

Commit e354f8a

Browse files
committed
Add CodeQL to CI suite
1 parent 57fe5b5 commit e354f8a

File tree

1 file changed

+28
-0
lines changed

1 file changed

+28
-0
lines changed

.github/workflows/ci.yml

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -141,3 +141,31 @@ jobs:
141141
run: |
142142
python -m pip install codecov
143143
codecov
144+
145+
analyze:
146+
name: CodeQL
147+
needs: [SQLite, extras, PostgreSQL]
148+
runs-on: ubuntu-latest
149+
permissions:
150+
actions: read
151+
contents: read
152+
security-events: write
153+
strategy:
154+
fail-fast: false
155+
matrix:
156+
language: [ python ]
157+
steps:
158+
- name: Checkout
159+
uses: actions/checkout@v3
160+
- name: Initialize CodeQL
161+
uses: github/codeql-action/init@v2
162+
with:
163+
languages: ${{ matrix.language }}
164+
queries: +security-and-quality
165+
- name: Autobuild
166+
uses: github/codeql-action/autobuild@v2
167+
if: ${{ matrix.language == 'javascript' || matrix.language == 'python' }}
168+
- name: Perform CodeQL Analysis
169+
uses: github/codeql-action/analyze@v2
170+
with:
171+
category: "/language:${{ matrix.language }}"

0 commit comments

Comments
 (0)