55c21888af
The Actions VM image containing v2.7.6 of the CodeQL CLI has now fully rolled out, so we no longer need to download the latest CodeQL bundle to use this CLI and include this repo in the ML-powered queries beta.
33 lines
657 B
YAML
33 lines
657 B
YAML
name: "Code Scanning - CodeQL"
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
pull_request:
|
|
branches: [main]
|
|
schedule:
|
|
- cron: '21 17 * * 0'
|
|
|
|
jobs:
|
|
codeql:
|
|
runs-on: ubuntu-latest
|
|
|
|
permissions:
|
|
contents: read
|
|
security-events: write
|
|
pull-requests: read
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v2
|
|
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@main
|
|
with:
|
|
languages: javascript
|
|
config-file: ./.github/codeql/codeql-config.yml
|
|
tools: latest
|
|
|
|
- name: Perform CodeQL Analysis
|
|
uses: github/codeql-action/analyze@main
|