Skip to content

Commit

Permalink
ci: improve codeql (#2523)
Browse files Browse the repository at this point in the history
* improve codeql

* update release/v* pattern

---------

Co-authored-by: yaruwangway <69694322+yaruwangway@users.noreply.github.com>
  • Loading branch information
mpoke and yaruwangway authored May 30, 2023
1 parent 6de5a88 commit 9637d1b
Showing 1 changed file with 18 additions and 29 deletions.
47 changes: 18 additions & 29 deletions .github/workflows/codeql-analysis.yml
Original file line number Diff line number Diff line change
@@ -1,26 +1,16 @@
# For most projects, this workflow file will not need changing; you simply need
# to commit it to your repository.
#
# You may wish to alter this file to override the set of languages analyzed,
# or to provide custom queries or build logic.
#
# ******** NOTE ********
# We have attempted to detect the languages in your repository. Please check
# the `language` matrix defined below to confirm you have the correct set of
# supported CodeQL languages.
#
name: "CodeQL"

on:
push:
branches: [ main, rc/v*, release/v* ]
pull_request:
# The branches below must be a subset of the branches above
branches: [ main ]
paths-ignore:
- "**/*.md"
schedule:
- cron: '0 * * * *'
paths:
- "**.go"
push:
branches:
- main
- release/v*
- feat/**
paths:
- "**.go"

jobs:
analyze:
Expand All @@ -31,26 +21,25 @@ jobs:
contents: read
security-events: write

strategy:
fail-fast: false
matrix:
language: [ 'go' ]
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
# Learn more about CodeQL language support at https://git.io/codeql-language-support

steps:
- name: Checkout repository
uses: actions/checkout@v3.5.2

# Initializes the CodeQL tools for scanning.
- uses: actions/setup-go@v4
with:
go-version: "1.20"
check-latest: true

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@v2
with:
languages: ${{ matrix.language }}
languages: "go"
# If you wish to specify custom queries, you can do so here or in a config file.
# By default, queries listed here will override any specified in a config file.
# Prefix the list here with "+" to use these queries and those in the config file.
# queries: ./path/to/local/query, your-org/your-repo/queries@main
queries: +security-and-quality,github/codeql/go/ql/src/experimental/InconsistentCode/DeferInLoop.ql@main,github/codeql/go/ql/src/experimental/Unsafe/WrongUsageOfUnsafe.ql@main,github/codeql/go/ql/src/experimental/CWE-369/DivideByZero.ql@main
packs: +crypto-com/cosmos-sdk-codeql

# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
Expand Down

0 comments on commit 9637d1b

Please sign in to comment.