Skip to content

Merge pull request #529 from solarwinds/dependabot/npm_and_yarn/misc-… #786

Merge pull request #529 from solarwinds/dependabot/npm_and_yarn/misc-…

Merge pull request #529 from solarwinds/dependabot/npm_and_yarn/misc-… #786

Workflow file for this run

name: CodeQL
on:
push:
branches:
- main
pull_request:
schedule:
- cron: "0 0 * * 1"
jobs:
analyze:
runs-on: ubuntu-latest
permissions:
security-events: write
strategy:
fail-fast: false
matrix:
language:
- javascript-typescript
# - c-cpp # Compilation method not supported at the moment
steps:
- uses: actions/checkout@v4
with:
lfs: true
submodules: true
- uses: actions/setup-node@v4
with:
node-version: 20
- run: corepack enable
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
with:
config-file: ./.github/codeql.yml
languages: ${{ matrix.language }}
- uses: actions/cache@v4
with:
path: .yarn/cache
key: yarn-${{ hashFiles('yarn.lock') }}
restore-keys: |
yarn-
- uses: actions/cache@v4
with:
path: |
~/.zig-build
~/.cache/zig
key: zig-${{ hashFiles('yarn.lock') }}
restore-keys: |
zig-
- run: yarn install --immutable
- run: yarn build
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
with:
category: "/language:${{matrix.language}}"