analyze-with-codeql.yml 976 B

1234567891011121314151617181920212223242526272829303132333435363738
  1. name: "Analyze Code with CodeQL"
  2. on:
  3. push:
  4. branches: [develop]
  5. pull_request:
  6. branches: [main]
  7. jobs:
  8. analyze:
  9. name: Analyze Code
  10. runs-on: ubuntu-latest
  11. permissions:
  12. actions: read
  13. contents: read
  14. security-events: write
  15. strategy:
  16. matrix:
  17. language: ["javascript-typescript"]
  18. # CodeQL supports "c-cpp", "csharp", "go", "java-kotlin", "javascript-typescript", "python", "ruby", "swift"
  19. # Learn more:
  20. # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
  21. steps:
  22. - uses: actions/checkout@v4
  23. with:
  24. submodules: recursive
  25. - name: Initialize CodeQL
  26. uses: github/codeql-action/init@v3
  27. with:
  28. languages: ${{ matrix.language }}
  29. - name: Perform CodeQL Analysis
  30. uses: github/codeql-action/analyze@v3