fix: added codeql permissions

filipeforattini · May 4, 2022 · 0909ed4 · 0909ed4
1 parent a699dd2
commit 0909ed4
Showing 1 changed file with 24 additions and 16 deletions.
diff --git a/.github/workflows/service-push.yml b/.github/workflows/service-push.yml
@@ -85,6 +85,30 @@ jobs:
         run: echo $PIPELINE_SETUP
 
 
+  #--------------------------------------------------#
+  #                  Static-Analysis                 # 
+  #--------------------------------------------------#
+  Static-Analysis:
+    runs-on: ubuntu-latest
+    needs: Setup
+
+    permissions:
+      security-events: write
+
+    steps:
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          languages: javascript, python
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2
+
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@v1
+
+
   #--------------------------------------------------#
   #                  Tests: Node.js                  # 
   #--------------------------------------------------#
@@ -157,22 +181,6 @@ jobs:
       - run: npm run lint --if-present
       - run: npm run test --if-present
 
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
-        with:
-          languages: javascript
-          category: javascript-${{ matrix.node-version }}
-
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
-        with:
-          category: javascript-${{ matrix.node-version }}
-
-      - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@v1
-        with:
-          category: javascript-${{ matrix.node-version }}
-
 
   #--------------------------------------------------#
   #                  Tests: Python                   #