Skip to content

CodeQL Actions

CodeQL Actions #641

name: CodeQL Actions
on:
merge_group:
pull_request:
branches:
- feature/**
- main
paths:
- .github/actions/**
- .github/workflows/**
push:
branches:
- main
paths:
- .github/actions/**
- .github/workflows/**
concurrency:
cancel-in-progress: true
group: code-ql-actions-${{ github.ref }}
permissions: {}
env:
FORCE_COLOR: 1
jobs:
run-code-ql:
name: CodeQL Actions
permissions:
contents: read
security-events: write
runs-on: ubuntu-24.04
steps:
- name: Check out repository
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Initialize CodeQL
uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
with:
languages: actions
- name: Perform CodeQL analysis
uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
with:
category: /language:actions
timeout-minutes: 5