actions
/
toolkit
mirror of https://github.com/actions/toolkit
1
0
Fork 0
Code
toolkit/.github/workflows/codeql.yml

38 lines
695 B
YAML
Raw Normal View History

Rename workflows
2024-01-26 19:07:41 +00:00
name: CodeQL Analysis
Add CodeQL Analysis workflow (#434) * Add CodeQL Analysis workflow * Rename .github/workflows/workflows/codeql.yml to .github/workflows/codeql.yml * Remove autobuilder * Add back autobuilder * Disable c# analysis
2020-05-06 16:58:36 +00:00
on:
push:
Format and update called actions
2024-01-26 19:01:49 +00:00
branches:
Only run codeql on main branch pushes (#826)
2021-06-01 14:11:52 +00:00
- main
Add on: pull_request trigger to CodeQL workflow (#689) From February 2021, in order to provide feedback on pull requests, Code Scanning workflows must be configured with both `push` and `pull_request` triggers. This is because Code Scanning compares the results from a pull request against the results for the base branch to tell you only what has changed between the two. Early in the beta period we supported displaying results on pull requests for workflows with only `push` triggers, but have discontinued support as this proved to be less robust. See https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#scanning-pull-requests for more information on how best to configure your Code Scanning workflows.
2021-01-15 11:22:00 +00:00
pull_request:
Add CodeQL Analysis workflow (#434) * Add CodeQL Analysis workflow * Rename .github/workflows/workflows/codeql.yml to .github/workflows/codeql.yml * Remove autobuilder * Add back autobuilder * Disable c# analysis
2020-05-06 16:58:36 +00:00
schedule:
- cron: '0 0 * * 0'
jobs:
Format and update called actions
2024-01-26 19:01:49 +00:00
analyze:
name: Analyze
runs-on: ubuntu-latest
Add CodeQL Analysis workflow (#434) * Add CodeQL Analysis workflow * Rename .github/workflows/workflows/codeql.yml to .github/workflows/codeql.yml * Remove autobuilder * Add back autobuilder * Disable c# analysis
2020-05-06 16:58:36 +00:00
strategy:
fail-fast: false
steps:
Format and update called actions
2024-01-26 19:01:49 +00:00
- name: Checkout
id: checkout
uses: actions/checkout@v4
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
id: init
uses: github/codeql-action/init@v2
with:
languages: javascript
- name: Autobuild
id: autobuild
uses: github/codeql-action/autobuild@v2
- name: Perform CodeQL Analysis
id: analyze
uses: github/codeql-action/analyze@v2