2023-05-05 14:39:57 -04:00
name : "CodeQL"
on :
push :
2024-03-06 12:23:07 -05:00
branches : [ "master" , "[0-9].[0-9]" ]
2023-05-05 14:39:57 -04:00
pull_request :
# The branches below must be a subset of the branches above
2024-03-06 12:23:07 -05:00
branches : [ "master" ]
2023-05-05 14:39:57 -04:00
schedule :
2024-03-06 12:23:07 -05:00
- cron : "0 4 * * *"
2023-05-05 14:39:57 -04:00
2024-02-01 10:08:41 -05:00
# cancel previous workflow jobs for PRs
concurrency :
group : ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
cancel-in-progress : true
2023-05-05 14:39:57 -04:00
jobs :
analyze :
name : Analyze
runs-on : ubuntu-22.04
permissions :
actions : read
contents : read
security-events : write
strategy :
fail-fast : false
matrix :
2024-03-06 12:23:07 -05:00
language : [ "python" , "javascript" ]
2023-05-05 14:39:57 -04:00
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
steps :
- name : Checkout repository
2024-02-01 13:56:33 -05:00
uses : actions/checkout@v4
2023-05-05 14:39:57 -04:00
2024-04-08 19:20:25 -04:00
- name : Check for file changes
id : check
uses : ./.github/actions/change-detector/
with :
token : ${{ secrets.GITHUB_TOKEN }}
2023-05-05 14:39:57 -04:00
# Initializes the CodeQL tools for scanning.
- name : Initialize CodeQL
2024-02-01 05:16:13 -05:00
uses : github/codeql-action/init@v3
2023-05-05 14:39:57 -04:00
with :
languages : ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
# By default, queries listed here will override any specified in a config file.
# Prefix the list here with "+" to use these queries and those in the config file.
# For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
# queries: security-extended,security-and-quality
- name : Perform CodeQL Analysis
2024-04-08 19:20:25 -04:00
if : steps.check.outputs.python || steps.check.outputs.frontend
2024-02-01 05:16:13 -05:00
uses : github/codeql-action/analyze@v3
2023-05-05 14:39:57 -04:00
with :
category : "/language:${{matrix.language}}"