Skip to content

Commit ae1f45f

Browse files
authored
Update codeql.yml
1 parent 135ab98 commit ae1f45f

File tree

1 file changed

+31
-34
lines changed

1 file changed

+31
-34
lines changed

.github/workflows/codeql.yml

+31-34
Original file line numberDiff line numberDiff line change
@@ -13,46 +13,44 @@ name: "CodeQL"
1313

1414
on:
1515
push:
16-
branches: [ "master" ]
16+
branches-ignore: "dependabot/**"
1717
pull_request:
18-
# The branches below must be a subset of the branches above
19-
branches: [ "master" ]
18+
paths-ignore:
19+
- '**.md'
2020
schedule:
21-
- cron: '23 21 * * 1'
21+
- cron: '0 11 * * 5'
2222

2323
jobs:
24-
analyze:
25-
name: Analyze
26-
runs-on: ubuntu-latest
27-
permissions:
28-
actions: read
29-
contents: read
30-
security-events: write
24+
CodeQL-Build:
3125

32-
strategy:
26+
strategy:
3327
fail-fast: false
34-
matrix:
35-
language: [ 'cpp', 'python' ]
36-
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
37-
# Use only 'java' to analyze code written in Java, Kotlin or both
38-
# Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
39-
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
28+
29+
# CodeQL runs on ubuntu-latest and windows-latest
30+
runs-on: ubuntu-latest
4031

4132
steps:
4233
- name: Checkout repository
4334
uses: actions/checkout@v3
35+
36+
permissions:
37+
actions: read
38+
contents: read
39+
security-events: write
4440

4541
# Initializes the CodeQL tools for scanning.
4642
- name: Initialize CodeQL
4743
uses: github/codeql-action/init@v2
48-
with:
49-
languages: ${{ matrix.language }}
50-
# If you wish to specify custom queries, you can do so here or in a config file.
51-
# By default, queries listed here will override any specified in a config file.
52-
# Prefix the list here with "+" to use these queries and those in the config file.
44+
# Override language selection by uncommenting this and choosing your languages
45+
# with:
46+
# languages: go, javascript, csharp, python, cpp, java
5347

5448
# Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
5549
# queries: security-extended,security-and-quality
50+
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
51+
# Use only 'java' to analyze code written in Java, Kotlin or both
52+
# Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
53+
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
5654

5755

5856
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
@@ -61,16 +59,15 @@ jobs:
6159
uses: github/codeql-action/autobuild@v2
6260

6361
# ℹ️ Command-line programs to run using the OS shell.
64-
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
65-
66-
# If the Autobuild fails above, remove it and uncomment the following three lines.
67-
# modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
68-
69-
# - run: |
70-
# echo "Run, Build Application using script"
71-
# ./location_of_script_within_repo/buildscript.sh
72-
62+
# 📚 https://git.io/JvXDl
63+
64+
# If the Autobuild fails above, remove it and uncomment the following three lines
65+
# and modify them (or add more) to build your code if your project
66+
# uses a compiled language
67+
68+
#- run: |
69+
# make bootstrap
70+
# make release
71+
7372
- name: Perform CodeQL Analysis
7473
uses: github/codeql-action/analyze@v2
75-
with:
76-
category: "/language:${{matrix.language}}"

0 commit comments

Comments
 (0)