github.com/argoproj/argo-cd@v1.8.7/.github/workflows/codeql.yml (about)

     1  name: "Code scanning - action"
     2  
     3  on:
     4    push:
     5    pull_request:
     6    schedule:
     7      - cron: '0 19 * * 0'
     8  
     9  jobs:
    10    CodeQL-Build:
    11  
    12      # CodeQL runs on ubuntu-latest and windows-latest
    13      runs-on: ubuntu-latest
    14  
    15      steps:
    16      - name: Checkout repository
    17        uses: actions/checkout@v2
    18        with:
    19          # We must fetch at least the immediate parents so that if this is
    20          # a pull request then we can checkout the head.
    21          fetch-depth: 2
    22  
    23      # If this run was triggered by a pull request event, then checkout
    24      # the head of the pull request instead of the merge commit.
    25      - run: git checkout HEAD^2
    26        if: ${{ github.event_name == 'pull_request' }}
    27        
    28      # Initializes the CodeQL tools for scanning.
    29      - name: Initialize CodeQL
    30        uses: github/codeql-action/init@v1
    31        # Override language selection by uncommenting this and choosing your languages
    32        # with:
    33        #   languages: go, javascript, csharp, python, cpp, java
    34  
    35      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
    36      # If this step fails, then you should remove it and run the build manually (see below)
    37      - name: Autobuild
    38        uses: github/codeql-action/autobuild@v1
    39  
    40      # ℹī¸ Command-line programs to run using the OS shell.
    41      # 📚 https://git.io/JvXDl
    42  
    43      # ✏ī¸ If the Autobuild fails above, remove it and uncomment the following three lines
    44      #    and modify them (or add more) to build your code if your project
    45      #    uses a compiled language
    46  
    47      #- run: |
    48      #   make bootstrap
    49      #   make release
    50  
    51      - name: Perform CodeQL Analysis
    52        uses: github/codeql-action/analyze@v1