github.com/terraform-linters/tflint-plugin-sdk@v0.22.0/.github/workflows/codeql-analysis.yml (about) 1 name: "Code scanning - action" 2 3 on: 4 pull_request: 5 schedule: 6 - cron: '0 14 * * 3' 7 8 jobs: 9 CodeQL-Build: 10 11 runs-on: ubuntu-latest 12 13 steps: 14 - name: Checkout repository 15 uses: actions/checkout@v4 16 with: 17 # We must fetch at least the immediate parents so that if this is 18 # a pull request then we can checkout the head. 19 fetch-depth: 2 20 21 # If this run was triggered by a pull request event, then checkout 22 # the head of the pull request instead of the merge commit. 23 - run: git checkout HEAD^2 24 if: ${{ github.event_name == 'pull_request' }} 25 26 - name: Set up Go 27 uses: actions/setup-go@v5 28 with: 29 go-version-file: 'go.mod' 30 31 # Initializes the CodeQL tools for scanning. 32 - name: Initialize CodeQL 33 uses: github/codeql-action/init@v3 34 # Override language selection by uncommenting this and choosing your languages 35 # with: 36 # languages: go 37 38 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). 39 # If this step fails, then you should remove it and run the build manually (see below) 40 - name: Autobuild 41 uses: github/codeql-action/autobuild@v3 42 43 # âšī¸ Command-line programs to run using the OS shell. 44 # đ https://git.io/JvXDl 45 46 # âī¸ If the Autobuild fails above, remove it and uncomment the following three lines 47 # and modify them (or add more) to build your code if your project 48 # uses a compiled language 49 50 #- run: | 51 # make bootstrap 52 # make release 53 54 - name: Perform CodeQL Analysis 55 uses: github/codeql-action/analyze@v3