CodeQL Advanced #494
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CodeQL Advanced" | |
| on: | |
| push: | |
| branches: [ "main", "DSSRF_Branch_Rule" ] | |
| pull_request: | |
| branches: [ "main", "DSSRF_Branch_Rule" ] | |
| schedule: | |
| - cron: '0 13 * * *' | |
| permissions: read-all | |
| jobs: | |
| analyze: | |
| name: Analyze (${{ matrix.language }}) | |
| runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }} | |
| # Restrict job permissions | |
| permissions: | |
| security-events: write # Required to upload results | |
| packages: read # Required for CodeQL packs | |
| actions: read # Required for private repo status | |
| contents: read # Required to scan code | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - language: actions | |
| build-mode: none | |
| - language: javascript-typescript | |
| build-mode: none | |
| steps: | |
| - name: Checkout repository | |
| # changed to v7, because it includes supply chain security changes | |
| uses: actions/checkout@1044a6dea927916f2c38ba5aeffbc0a847b1221a | |
| - name: Initialize CodeQL | |
| # v3 | |
| uses: github/codeql-action/init@5e7a52feb2a3dfb87f88be2af33b9e2275f48de6 | |
| with: | |
| languages: ${{ matrix.language }} | |
| build-mode: ${{ matrix.build-mode }} | |
| queries: security-extended,security-and-quality | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@5e7a52feb2a3dfb87f88be2af33b9e2275f48de6 | |
| with: | |
| category: "/language:${{matrix.language}}" |