dubbo.apache.org/dubbo-go/v3@v3.1.1/.github/workflows/codeql-analysis.yml (about)

     1  name: "CodeQL"
     2  
     3  on:
     4    push:
     5      branches: "*"
     6    pull_request:
     7      # The branches below must be a subset of the branches above
     8      branches: "*"
     9  
    10  permissions:
    11    contents: read
    12  
    13  jobs:
    14    analyse:
    15      permissions:
    16        actions: read  # for github/codeql-action/init to get workflow details
    17        contents: read  # for actions/checkout to fetch code
    18        security-events: write  # for github/codeql-action/autobuild to send a status report
    19      name: Analyse
    20      runs-on: ubuntu-latest
    21  
    22      steps:
    23      - name: Checkout repository
    24        uses: actions/checkout@v3
    25        with:
    26          # We must fetch at least the immediate parents so that if this is
    27          # a pull request then we can checkout the head.
    28          fetch-depth: 2
    29  
    30      # If this run was triggered by a pull request event, then checkout
    31      # the head of the pull request instead of the merge commit.
    32      - run: git checkout HEAD^2
    33        if: ${{ github.event_name == 'pull_request' }}
    34  
    35      # Initializes the CodeQL tools for scanning.
    36      - name: Initialize CodeQL
    37        uses: github/codeql-action/init@v2
    38        # Override language selection by uncommenting this and choosing your languages
    39        # with:
    40        #   languages: go, javascript, csharp, python, cpp, java
    41  
    42      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
    43      # If this step fails, then you should remove it and run the build manually (see below)
    44      - name: Autobuild
    45        uses: github/codeql-action/autobuild@v2
    46  
    47      # ℹī¸ Command-line programs to run using the OS shell.
    48      # 📚 https://git.io/JvXDl
    49  
    50      # ✏ī¸ If the Autobuild fails above, remove it and uncomment the following three lines
    51      #    and modify them (or add more) to build your code if your project
    52      #    uses a compiled language
    53  
    54      #- run: |
    55      #   make bootstrap
    56      #   make release
    57  
    58      - name: Perform CodeQL Analysis
    59        uses: github/codeql-action/analyze@v2