github.com/containerd/Containerd@v1.4.13/.github/workflows/codeql.yml (about)

     1  name: "CodeQL Scan"
     2  
     3  on:
     4    push:
     5    schedule:
     6      - cron: '0 0 * * 0'
     7    pull_request:
     8      paths:
     9        - '.github/workflows/codeql.yml'
    10  
    11  jobs:
    12    CodeQL-Build:
    13  
    14      strategy:
    15        fail-fast: false
    16  
    17  
    18      # CodeQL runs on ubuntu-latest, windows-latest, and macos-latest
    19      runs-on: ubuntu-latest
    20  
    21      steps:
    22      - name: Checkout repository
    23        uses: actions/checkout@v2
    24  
    25      # Initializes the CodeQL tools for scanning.
    26      - name: Initialize CodeQL
    27        uses: github/codeql-action/init@v1
    28        # Override language selection by uncommenting this and choosing your languages
    29        # with:
    30        #   languages: go, javascript, csharp, python, cpp, java
    31  
    32      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
    33      # If this step fails, then you should remove it and run the build manually (see below).
    34      - name: Autobuild
    35        uses: github/codeql-action/autobuild@v1
    36  
    37      # ℹī¸ Command-line programs to run using the OS shell.
    38      # 📚 https://git.io/JvXDl
    39  
    40      # ✏ī¸ If the Autobuild fails above, remove it and uncomment the following three lines
    41      #    and modify them (or add more) to build your code if your project
    42      #    uses a compiled language
    43  
    44      #- run: |
    45      #   make bootstrap
    46      #   make release
    47  
    48      - name: Perform CodeQL Analysis
    49        uses: github/codeql-action/analyze@v1