Skip to content
This repository was archived by the owner on Jan 16, 2025. It is now read-only.

Commit 8fbe746

Browse files
authored
chore: add codeql workflow (#4216)
1 parent 7983143 commit 8fbe746

File tree

1 file changed

+41
-0
lines changed

1 file changed

+41
-0
lines changed

Diff for: .github/workflows/codeql.yml

+41
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
name: "CodeQL Advanced"
2+
3+
on:
4+
push:
5+
branches: [ "main", "develop", "v1" ]
6+
pull_request:
7+
branches: [ "main", "develop", "v1" ]
8+
paths-ignore:
9+
- '**/*.md'
10+
schedule:
11+
- cron: '25 19 * * 2'
12+
13+
jobs:
14+
analyze:
15+
name: Analyze (${{ matrix.language }})
16+
runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
17+
permissions:
18+
# required for all workflows
19+
security-events: write
20+
21+
strategy:
22+
fail-fast: false
23+
matrix:
24+
include:
25+
- language: javascript-typescript
26+
build-mode: none
27+
steps:
28+
- name: Checkout repository
29+
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
30+
31+
# Initializes the CodeQL tools for scanning.
32+
- name: Initialize CodeQL
33+
uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
34+
with:
35+
languages: ${{ matrix.language }}
36+
build-mode: ${{ matrix.build-mode }}
37+
38+
- name: Perform CodeQL Analysis
39+
uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
40+
with:
41+
category: "/language:${{matrix.language}}"

0 commit comments

Comments
 (0)