@@ -13,46 +13,44 @@ name: "CodeQL"
13
13
14
14
on :
15
15
push :
16
- branches : [ "master" ]
16
+ branches-ignore : " dependabot/** "
17
17
pull_request :
18
- # The branches below must be a subset of the branches above
19
- branches : [ "master" ]
18
+ paths-ignore :
19
+ - ' **.md '
20
20
schedule :
21
- - cron : ' 23 21 * * 1 '
21
+ - cron : ' 0 11 * * 5 '
22
22
23
23
jobs :
24
- analyze :
25
- name : Analyze
26
- runs-on : ubuntu-latest
27
- permissions :
28
- actions : read
29
- contents : read
30
- security-events : write
24
+ CodeQL-Build :
31
25
32
- strategy :
26
+ strategy :
33
27
fail-fast : false
34
- matrix :
35
- language : [ 'cpp', 'python' ]
36
- # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
37
- # Use only 'java' to analyze code written in Java, Kotlin or both
38
- # Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
39
- # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
28
+
29
+ # CodeQL runs on ubuntu-latest and windows-latest
30
+ runs-on : ubuntu-latest
40
31
41
32
steps :
42
33
- name : Checkout repository
43
34
uses : actions/checkout@v3
35
+
36
+ permissions :
37
+ actions : read
38
+ contents : read
39
+ security-events : write
44
40
45
41
# Initializes the CodeQL tools for scanning.
46
42
- name : Initialize CodeQL
47
43
uses : github/codeql-action/init@v2
48
- with :
49
- languages : ${{ matrix.language }}
50
- # If you wish to specify custom queries, you can do so here or in a config file.
51
- # By default, queries listed here will override any specified in a config file.
52
- # Prefix the list here with "+" to use these queries and those in the config file.
44
+ # Override language selection by uncommenting this and choosing your languages
45
+ # with:
46
+ # languages: go, javascript, csharp, python, cpp, java
53
47
54
48
# Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
55
49
# queries: security-extended,security-and-quality
50
+ # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
51
+ # Use only 'java' to analyze code written in Java, Kotlin or both
52
+ # Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
53
+ # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
56
54
57
55
58
56
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
@@ -61,16 +59,15 @@ jobs:
61
59
uses : github/codeql-action/autobuild@v2
62
60
63
61
# ℹ️ Command-line programs to run using the OS shell.
64
- # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
65
-
66
- # If the Autobuild fails above, remove it and uncomment the following three lines.
67
- # modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
68
-
69
- # - run: |
70
- # echo "Run, Build Application using script"
71
- # ./location_of_script_within_repo/buildscript.sh
72
-
62
+ # 📚 https://git.io/JvXDl
63
+
64
+ # If the Autobuild fails above, remove it and uncomment the following three lines
65
+ # and modify them (or add more) to build your code if your project
66
+ # uses a compiled language
67
+
68
+ # - run: |
69
+ # make bootstrap
70
+ # make release
71
+
73
72
- name : Perform CodeQL Analysis
74
73
uses : github/codeql-action/analyze@v2
75
- with :
76
- category : " /language:${{matrix.language}}"
0 commit comments