code.vegaprotocol.io/vega@v0.79.0/.github/workflows/codeql.yml (about)

     1  ---
     2  
     3  name: "CodeQL"
     4  
     5  "on":
     6    push:
     7      branches: ["develop", master]
     8    pull_request:
     9      # The branches below must be a subset of the branches above
    10      branches: ["develop"]
    11    schedule:
    12      - cron: '44 20 * * 5'
    13  
    14  jobs:
    15    analyze:
    16      name: Analyze
    17      runs-on: ubuntu-latest
    18      permissions:
    19        actions: read
    20        contents: read
    21        security-events: write
    22  
    23      strategy:
    24        fail-fast: false
    25        matrix:
    26          language: ['go']
    27  
    28      steps:
    29        - uses: actions/setup-go@v4
    30          with:
    31            go-version: '>=1.21.0'
    32        - name: Checkout repository
    33          uses: actions/checkout@v4
    34  
    35        # Initializes the CodeQL tools for scanning.
    36        - name: Initialize CodeQL
    37          uses: github/codeql-action/init@v3
    38          with:
    39            languages: ${{ matrix.language }}
    40  
    41        # Autobuild attempts to build any compiled languages  (C/C++, C#, Go, or Java).
    42        # If this step fails, then you should remove it and run the build manually (see below)
    43        - name: Autobuild
    44          uses: github/codeql-action/autobuild@v3
    45  
    46        - name: Perform CodeQL Analysis
    47          uses: github/codeql-action/analyze@v3
    48          with:
    49            category: "/language:${{matrix.language}}"