CodeQL #27

	name: CodeQL

	# Static security analysis for the C# codebase.
	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]
	schedule:
	- cron: '27 3 * * 1' # weekly, Monday 03:27 UTC

	concurrency:
	group: codeql-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read
	security-events: write # upload results to the Security tab

	jobs:
	analyze:
	name: Analyze (csharp)
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v7

	- name: Setup .NET (8 / 9 / 10)
	uses: actions/setup-dotnet@v5
	with:
	dotnet-version: \|
	8.0.x
	9.0.x
	10.0.x

	- name: Initialize CodeQL
	uses: github/codeql-action/init@v4
	with:
	languages: csharp
	build-mode: manual

	# Explicit build so CodeQL sees every project and target framework.
	- name: Build
	run: dotnet build YandexMusic.slnx -c Release

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v4
	with:
	category: "/language:csharp"

Navigation Menu