feat(codeql.yml): add CodeQL workflow for continuous code analysis us…

…ing CodeQL refactor(snyk): remove .snyk policy file as it is no longer needed for vulnerability management
liquibase · Jan 16, 2024 · a994095 · a994095
1 parent d2b576d
commit a994095
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 10 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -0,0 +1,18 @@
+name: CodeQL
+
+on:
+ workflow_dispatch:
+ push:
+ branches: [ "main" ]
+ pull_request:
+ # The branches below must be a subset of the branches above
+ branches: [ "main" ]
+ schedule:
+ - cron: '16 14 * * 4'
+
+jobs:
+ codeql:
+ uses: liquibase/build-logic/.github/workflows/codeql.yml@v0.6.1
+ secrets: inherit
+ with:
+ languages: '["java"]'
diff --git a/.snyk b/.snyk