chore(deps): bump github/codeql-action/init from 3.37.9 to 4.37.9 #5
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: codeql | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| schedule: | |
| # Weekly, because the query pack keeps improving after the code stops | |
| # changing: a rule shipped in October should still get to look at old code. | |
| - cron: "27 4 * * 1" | |
| permissions: | |
| contents: read | |
| jobs: | |
| analyze: | |
| name: analyze (python) | |
| runs-on: ubuntu-latest | |
| permissions: | |
| # Job-level permissions replace the workflow-level block rather than | |
| # merging with it, so contents:read is restated here for the checkout. | |
| contents: read | |
| security-events: write | |
| steps: | |
| - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 | |
| - uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 | |
| with: | |
| languages: python | |
| queries: security-extended | |
| - uses: github/codeql-action/analyze@6f5948dfacef28e207b48d0905cf90c03365536d # v3.37.9 |