github.com/greenpau/go-authcrunch@v1.1.4/.github/workflows/codeql.yml (about) 1 name: "CodeQL" 2 3 on: 4 workflow_dispatch: {} 5 #push: 6 # branches: [ main ] 7 #pull_request: 8 # branches: [ main ] 9 #schedule: 10 #- cron: '40 19 * * 2' 11 12 jobs: 13 analyze: 14 name: Analyze 15 runs-on: ubuntu-latest 16 permissions: 17 actions: read 18 contents: read 19 security-events: write 20 21 strategy: 22 fail-fast: false 23 matrix: 24 language: [ 'go' ] 25 26 steps: 27 - name: Checkout repository 28 uses: actions/checkout@v4 29 30 # Initializes the CodeQL tools for scanning. 31 - name: Initialize CodeQL 32 uses: github/codeql-action/init@v3 33 with: 34 languages: ${{ matrix.language }} 35 debug: true 36 37 - name: Autobuild 38 uses: github/codeql-action/autobuild@v3 39 40 - name: Perform CodeQL Analysis 41 uses: github/codeql-action/analyze@v2 42 env: 43 CODEQL_ACTION_EXTRA_OPTIONS: '{"database":{"interpret-results":["--max-paths",0]}}' 44 with: 45 # upload: false 46 wait-for-processing: true 47 48 - name: Upload CodeQL Analysis 49 uses: actions/upload-artifact@v3 50 with: 51 name: go.sarif 52 path: ${{runner.workspace}}/results/go.sarif