Skip to content

Commit c86597c

Browse files
committed
ci: codeql
1 parent de6d9cc commit c86597c

File tree

1 file changed

+42
-0
lines changed

1 file changed

+42
-0
lines changed

.github/workflows/codeql.yml

+42
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
name: CodeQL Analysis
2+
3+
# **What it does**: This runs CodeQL on this repo.
4+
# **Why we have it**: Security scanning.
5+
6+
on:
7+
push:
8+
branches:
9+
- master
10+
- main
11+
pull_request:
12+
branches:
13+
- master
14+
- main
15+
16+
permissions:
17+
security-events: write
18+
19+
# This allows a subsequently queued workflow run to interrupt previous runs
20+
concurrency:
21+
group: "${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
22+
cancel-in-progress: true
23+
24+
jobs:
25+
build:
26+
if: github.event.pull_request.draft == false
27+
runs-on: ubuntu-latest
28+
steps:
29+
- name: Check out repo
30+
uses: actions/checkout@v3
31+
with:
32+
persist-credentials: false
33+
34+
# Initialises the CodeQL tools for scanning
35+
- name: Initialise CodeQL
36+
uses: github/codeql-action/init@v2
37+
with:
38+
languages: javascript
39+
queries: "security-and-quality"
40+
41+
- name: Perform CodeQL analysis
42+
uses: github/codeql-action/analyze@v2

0 commit comments

Comments
 (0)