github.com/shogo82148/goa-v1@v1.6.2/.github/workflows/codeql-analysis.yml (about) 1 # For most projects, this workflow file will not need changing; you simply need 2 # to commit it to your repository. 3 # 4 # You may wish to alter this file to override the set of languages analyzed, 5 # or to provide custom queries or build logic. 6 name: "CodeQL" 7 8 on: 9 push: 10 branches: [main] 11 pull_request: 12 # The branches below must be a subset of the branches above 13 branches: [main] 14 schedule: 15 - cron: '0 3 * * 6' 16 17 jobs: 18 analyze: 19 name: Analyze 20 runs-on: ubuntu-latest 21 22 strategy: 23 fail-fast: false 24 matrix: 25 # Override automatic language detection by changing the below list 26 # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python'] 27 language: ['go'] 28 # Learn more... 29 # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection 30 31 steps: 32 - name: Checkout repository 33 uses: actions/checkout@v4 34 35 # Initializes the CodeQL tools for scanning. 36 - name: Initialize CodeQL 37 uses: github/codeql-action/init@v3 38 with: 39 languages: ${{ matrix.language }} 40 # If you wish to specify custom queries, you can do so here or in a config file. 41 # By default, queries listed here will override any specified in a config file. 42 # Prefix the list here with "+" to use these queries and those in the config file. 43 # queries: ./path/to/local/query, your-org/your-repo/queries@main 44 45 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). 46 # If this step fails, then you should remove it and run the build manually (see below) 47 - name: Autobuild 48 uses: github/codeql-action/autobuild@v3 49 50 # âšī¸ Command-line programs to run using the OS shell. 51 # đ https://git.io/JvXDl 52 53 # âī¸ If the Autobuild fails above, remove it and uncomment the following three lines 54 # and modify them (or add more) to build your code if your project 55 # uses a compiled language 56 57 #- run: | 58 # make bootstrap 59 # make release 60 61 - name: Perform CodeQL Analysis 62 uses: github/codeql-action/analyze@v3