tsdhn/.github/workflows/codeql.yml at ff862f2be4da228899b3de21d826b7dab59c6a36 · totallynotdavid/tsdhn · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
name: CodeQL

on:
    push:
        branches: ["main"]
    pull_request:
    schedule:
        - cron: "32 16 * * 3"
    workflow_dispatch:

jobs:
    analyze:
        runs-on: ubuntu-latest
        permissions:
            actions: read
            packages: read
            security-events: write

        strategy:
            fail-fast: false
            matrix:
                language: ["python", "actions"]

        steps:
            - uses: actions/checkout@v4

            - uses: github/codeql-action/init@v3
              with:
                  languages: ${{ matrix.language }}
                  queries: security-extended

            - uses: github/codeql-action/analyze@v3
              with:
                  category: "/language:${{matrix.language}}"