| 123456789101112131415161718192021222324252627282930313233343536373839404142434445 |
- name: "CodeQL"
- on:
- push:
- branches: [ "dev" ]
- pull_request:
- # The branches below must be a subset of the branches above
- branches: [ "dev" ]
- schedule:
- - cron: '29 23 * * 0'
- workflow_dispatch:
- jobs:
- analyze:
- name: Analyze
- runs-on: ubuntu-latest
- permissions:
- actions: read
- contents: read
- security-events: write
- strategy:
- fail-fast: false
- matrix:
- language: [ 'javascript' ]
- steps:
- - name: Checkout repository
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
- # Initializes the CodeQL tools for scanning.
- - name: Initialize CodeQL
- uses: github/codeql-action/init@294a9d92911152fe08befb9ec03e240add280cb3 # v3
- with:
- languages: ${{ matrix.language }}
- config-file: ./.github/codeql-config.yml
- queries: security-and-quality
- - name: Autobuild
- uses: github/codeql-action/autobuild@294a9d92911152fe08befb9ec03e240add280cb3 # v3
- - name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@294a9d92911152fe08befb9ec03e240add280cb3 # v3
- with:
- category: "/language:${{matrix.language}}"
|
