File tree 1 file changed +42
-0
lines changed
1 file changed +42
-0
lines changed Original file line number Diff line number Diff line change
1
+ name : CodeQL Analysis
2
+
3
+ # **What it does**: This runs CodeQL on this repo.
4
+ # **Why we have it**: Security scanning.
5
+
6
+ on :
7
+ push :
8
+ branches :
9
+ - master
10
+ - main
11
+ pull_request :
12
+ branches :
13
+ - master
14
+ - main
15
+
16
+ permissions :
17
+ security-events : write
18
+
19
+ # This allows a subsequently queued workflow run to interrupt previous runs
20
+ concurrency :
21
+ group : " ${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
22
+ cancel-in-progress : true
23
+
24
+ jobs :
25
+ build :
26
+ if : github.event.pull_request.draft == false
27
+ runs-on : ubuntu-latest
28
+ steps :
29
+ - name : Check out repo
30
+ uses : actions/checkout@v3
31
+ with :
32
+ persist-credentials : false
33
+
34
+ # Initialises the CodeQL tools for scanning
35
+ - name : Initialise CodeQL
36
+ uses : github/codeql-action/init@v2
37
+ with :
38
+ languages : javascript
39
+ queries : " security-and-quality"
40
+
41
+ - name : Perform CodeQL analysis
42
+ uses : github/codeql-action/analyze@v2
You can’t perform that action at this time.
0 commit comments