1 |
# For most projects, this workflow file will not need changing; you simply need |
2 |
# to commit it to your repository. |
3 |
# |
4 |
# You may wish to alter this file to override the set of languages analyzed, |
5 |
# or to provide custom queries or build logic. |
6 |
# |
7 |
# ******** NOTE ******** |
8 |
# We have attempted to detect the languages in your repository. Please check |
9 |
# the `language` matrix defined below to confirm you have the correct set of |
10 |
# supported CodeQL languages. |
11 |
# |
12 |
name: "CodeQL" |
13 |
|
14 |
on: |
15 |
push: |
16 |
branches: ["main"] |
17 |
pull_request: |
18 |
branches: ["main"] |
19 |
schedule: |
20 |
- cron: "0 0 * * *" |
21 |
|
22 |
jobs: |
23 |
analyze: |
24 |
name: Analyze |
25 |
runs-on: ubuntu-latest |
26 |
permissions: |
27 |
actions: read |
28 |
contents: read |
29 |
security-events: write |
30 |
|
31 |
strategy: |
32 |
fail-fast: false |
33 |
matrix: |
34 |
language: ["javascript"] |
35 |
|
36 |
steps: |
37 |
- name: Checkout repository |
38 |
uses: actions/checkout@v4 |
39 |
|
40 |
- name: Initialize CodeQL |
41 |
uses: github/codeql-action/init@v3 |
42 |
with: |
43 |
languages: ${{ matrix.language }} |
44 |
config-file: ".github/codeql/config.yml" |
45 |
|
46 |
- name: Autobuild |
47 |
uses: github/codeql-action/autobuild@v3 |
48 |
|
49 |
- name: Perform CodeQL Analysis |
50 |
uses: github/codeql-action/analyze@v3 |
51 |
with: |
52 |
category: "/language:${{matrix.language}}" |