Merge pull request #1006 from kubernetes-sigs/dependabot/github_actio… #35

	name: "CodeQL"

	on:
	push:
	branches: [main]
	pull_request:
	types: [opened, edited, synchronize, reopened]
	schedule:
	- cron: "0 6 * * 1" # Every Monday at 06:00 UTC

	permissions:
	contents: read

	jobs:
	analyze:
	name: Analyze
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	strategy:
	fail-fast: false
	matrix:
	language: ["go"]
	steps:
	- name: Checkout repository
	uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # tag=v4.2.2
	with:
	fetch-depth: 0

	- name: Calculate go version
	id: vars
	run: echo "go_version=$(make go-version)" >> $GITHUB_OUTPUT

	- name: Set up Go
	uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # tag=v6.3.0
	with:
	go-version: ${{ steps.vars.outputs.go_version }}

	- name: Initialize CodeQL
	uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # tag=v4.32.6
	with:
	languages: ${{ matrix.language }}

	- name: Build
	run: make operator plugin

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # tag=v4.32.6
	with:
	category: "/language:${{ matrix.language }}"

Provide feedback