From d316957468e758c476224253de5bb015cfdc3a6a Mon Sep 17 00:00:00 2001 From: Brian Caswell Date: Mon, 1 Mar 2021 13:19:28 -0500 Subject: [PATCH 1/2] add CodeQL pipeline --- .github/codeql/codeql-config.yml | 6 +++++ .github/workflows/codeql-analysis.yml | 34 +++++++++++++++++++++++++++ 2 files changed, 40 insertions(+) create mode 100644 .github/codeql/codeql-config.yml create mode 100644 .github/workflows/codeql-analysis.yml diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml new file mode 100644 index 0000000000..7ec4ec9b08 --- /dev/null +++ b/.github/codeql/codeql-config.yml @@ -0,0 +1,6 @@ +paths: + - src/cli + - src/agent + - src/pytypes + - src/deployment + - src/api-service/__app__ diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml new file mode 100644 index 0000000000..7d4586794f --- /dev/null +++ b/.github/workflows/codeql-analysis.yml @@ -0,0 +1,34 @@ +me: "CodeQL" + +on: + push: + branches: [ main ] + pull_request: + # The branches below must be a subset of the branches above + branches: [ main ] + schedule: + - cron: '29 3 * * 0' + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-latest + + strategy: + fail-fast: false + matrix: + language: [ 'python' ] + + steps: + - name: Checkout repository + uses: actions/checkout@v2 + + # Initializes the CodeQL tools for scanning. + - name: Initialize CodeQL + uses: github/codeql-action/init@v1 + with: + languages: ${{ matrix.language }} + config-file: ./.github/codeql/codeql-config.yml + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v1 From fe2a589283cfe57d83a09ee36c4823539610036b Mon Sep 17 00:00:00 2001 From: Brian Caswell Date: Mon, 1 Mar 2021 13:25:57 -0500 Subject: [PATCH 2/2] fix workflow name --- .github/workflows/codeql-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 7d4586794f..e9dd459c84 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -1,4 +1,4 @@ -me: "CodeQL" +name: "CodeQL" on: push: