github.com/gofiber/fiber/v2@v2.47.0/.github/workflows/codeql-analysis.yml (about)

     1  name: "CodeQL"
     2  
     3  on:
     4    push:
     5      branches:
     6        - master
     7        - main
     8      paths:
     9        - '**'
    10        - '!docs/**'
    11        - '!**.md'
    12    pull_request:
    13      paths:
    14        - '**'
    15        - '!docs/**'
    16        - '!**.md'
    17    schedule:
    18      - cron: '0 3 * * 6'
    19  
    20  jobs:
    21    analyse:
    22      name: Analyse
    23      runs-on: ubuntu-latest
    24  
    25      steps:
    26      - name: Checkout repository
    27        uses: actions/checkout@v3
    28        with:
    29          # We must fetch at least the immediate parents so that if this is
    30          # a pull request then we can checkout the head.
    31          fetch-depth: 2
    32  
    33      # If this run was triggered by a pull request event, then checkout
    34      # the head of the pull request instead of the merge commit.
    35      - run: git checkout HEAD^2
    36        if: ${{ github.event_name == 'pull_request' }}
    37  
    38      # Initializes the CodeQL tools for scanning.
    39      - name: Initialize CodeQL
    40        uses: github/codeql-action/init@v2
    41        # Override language selection by uncommenting this and choosing your languages
    42        with:
    43          languages: go
    44  
    45      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
    46      # If this step fails, then you should remove it and run the build manually (see below)
    47      - name: Autobuild
    48        uses: github/codeql-action/autobuild@v2
    49  
    50      # ℹī¸ Command-line programs to run using the OS shell.
    51      # 📚 https://git.io/JvXDl
    52  
    53      # ✏ī¸ If the Autobuild fails above, remove it and uncomment the following three lines
    54      #    and modify them (or add more) to build your code if your project
    55      #    uses a compiled language
    56  
    57      #- run: |
    58      #   make bootstrap
    59      #   make release
    60  
    61      - name: Perform CodeQL Analysis
    62        uses: github/codeql-action/analyze@v2