Skip to content

Analyze CodeQL

Analyze CodeQL #327

Workflow file for this run

name: Analyze CodeQL
permissions:
contents: read
on:
push:
branches: ["main"]
pull_request:
paths-ignore:
- "**.md"
- "**.jpg"
- "**.png"
- "**.gif"
- "**.svg"
- "CODEOWNERS"
schedule:
# https://crontab.guru/#0_2_*_*_5 - at 10:00 A.M. UTC on Friday
- cron: "0 10 * * 5"
jobs:
validate:
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
steps:
- name: Checkout
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: Install tools
uses: ./.github/actions/install-tools
- name: Initialize CodeQL
uses: github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
with:
languages: go
config-file: ./.github/codeql.yaml
- run: make build
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
with:
category: "/language:go"