Skip to content

Check: CodeQL

Check: CodeQL #97

name: "Check: CodeQL"
on:
workflow_dispatch: {}
workflow_call: {}
push:
branches:
- main
schedule:
- cron: '31 7 * * 3'
permissions:
contents: read
jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
continue-on-error: true
permissions:
actions: read
checks: write
contents: read
security-events: write
strategy:
fail-fast: false
matrix:
language:
- TypeScript
steps:
- name: "Setup: Harden Runner"
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
with:
egress-policy: audit
- name: "Setup: Checkout"
id: checkout
uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
- name: "Setup: Initialize CodeQL"
id: initialize
uses: github/codeql-action/init@1b1aada464948af03b950897e5eb522f92603cc2 # v3.24.9
with:
languages: ${{ matrix.language }}
source-root: src
- name: "Build: Autobuild"
id: autobuild
continue-on-error: true
uses: github/codeql-action/autobuild@1b1aada464948af03b950897e5eb522f92603cc2 # v3.24.9
- name: "Check: Perform CodeQL Analysis"
id: analyze
continue-on-error: true
uses: github/codeql-action/analyze@1b1aada464948af03b950897e5eb522f92603cc2 # v3.24.9