Skip to content
This repository has been archived by the owner on Nov 14, 2024. It is now read-only.

chore: enable github advanced security codeql workflow #12

Merged
merged 1 commit into from
Nov 6, 2024
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
57 changes: 57 additions & 0 deletions .github/workflows/codeql.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,57 @@
name: "Advanced Security CodeQL Scan"

on:
push:
branches: ["master"]
pull_request:
branches: ["master"]
schedule:
- cron: "43 11 * * 5"

jobs:
analyze:
name: Analyze
# Runner size impacts CodeQL analysis time. To learn more, please see:
# - https://gh.io/recommended-hardware-resources-for-running-codeql
# - https://gh.io/supported-runners-and-hardware-resources
# - https://gh.io/using-larger-runners
# Consider using larger runners for possible analysis time improvements.
runs-on: "ubuntu-latest-4-cores"
timeout-minutes: 30
permissions:
security-events: write
actions: read
contents: read

strategy:
fail-fast: false
matrix:
language: ["typescript","javascript"]

steps:
- name: Checkout repository
uses: actions/checkout@v4
continue-on-error: true
with:
ref: ${{ github.sha }}

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
continue-on-error: true
with:
languages: ${{ matrix.language }}

# For more details on CodeQL"s query packs, refer to:
# https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
queries: security-extended,security-and-quality

- name: Autobuild
uses: github/codeql-action/autobuild@v3
continue-on-error: true

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
continue-on-error: true
with:
category: "/language:${{matrix.language}}"
Loading