Skip to content

Commit d28e8e9

Browse files
authored
chore(ci): enable CodeQl
1 parent 7aee0d2 commit d28e8e9

File tree

1 file changed

+52
-0
lines changed

1 file changed

+52
-0
lines changed

.github/workflows/codeql.yml

+52
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
name: "CodeQL"
2+
3+
on:
4+
push:
5+
branches: ["main"]
6+
pull_request:
7+
# The branches below must be a subset of the branches above
8+
branches: ["main"]
9+
schedule:
10+
- cron: "0 0 * * 1"
11+
12+
permissions:
13+
contents: read
14+
15+
jobs:
16+
analyze:
17+
name: Analyze
18+
runs-on: ubuntu-latest
19+
permissions:
20+
actions: read
21+
contents: read
22+
security-events: write
23+
24+
strategy:
25+
fail-fast: false
26+
matrix:
27+
language: ["typescript"]
28+
29+
steps:
30+
- name: Checkout code
31+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
32+
33+
# Initializes the CodeQL tools for scanning.
34+
- name: Initialize CodeQL
35+
uses: github/codeql-action/init@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 # v3.23.0
36+
with:
37+
languages: ${{ matrix.language }}
38+
39+
- name: Setup NodeJS
40+
uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
41+
with:
42+
node-version: ${{ matrix.version }}
43+
cache: "npm"
44+
- name: Setup dependencies
45+
uses: ./.github/actions/cached-node-modules
46+
with:
47+
nodeVersion: 20
48+
49+
- name: Perform CodeQL Analysis
50+
uses: github/codeql-action/analyze@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 # v3.23.0
51+
with:
52+
category: "/language:${{matrix.language}}"

0 commit comments

Comments
 (0)