Create codeql-analysis.yml
Naveen committed
Feb 8, 2021 at 16:44 UTC
28fec951663e39fdc5898ab5ff994f6d7be8dfe5
1 file changed
+40
.github/workflows/codeql-analysis.yml
new
+40
@@ -0,0 +1,40 @@
1
+# https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
2
+name: "CodeQL"
3
+
4
+on:
5
+ push:
6
+ branches: [ master ]
7
+ pull_request:
8
+ # The branches below must be a subset of the branches above
9
+ branches: [ master ]
10
+ schedule:
11
+ - cron: '30 12 * * 2'
12
+
13
+jobs:
14
+ analyze:
15
+ name: Analyze
16
+ runs-on: ubuntu-latest
17
+
18
+ strategy:
19
+ fail-fast: false
20
+ matrix:
21
+ language: [ 'go', 'python' ]
22
+ # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]
23
+ # Learn more:
24
+ # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
25
+
26
+ steps:
27
+ - name: Checkout repository
28
+ uses: actions/checkout@v2
29
+
30
+ # Initializes the CodeQL tools for scanning.
31
+ - name: Initialize CodeQL
32
+ uses: github/codeql-action/init@v1
33
+ with:
34
+ languages: ${{ matrix.language }}
35
+
36
+ - name: Autobuild
37
+ uses: github/codeql-action/autobuild@v1
38
+
39
+ - name: Perform CodeQL Analysis
40
+ uses: github/codeql-action/analyze@v1