codeql.yml

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: 'CodeQL analysis'

on:
  push:
    tags: ['*']
    branches: ['*']
  pull_request:
    branches: ['*']
  schedule:
    - cron: '25 10 * * 3'
  workflow_dispatch:

permissions: {}

jobs:

  analyze:
    name: 'CodeQL analysis'
    runs-on: 'ubuntu-latest'
    permissions:
      actions: 'read'
      contents: 'read'
      security-events: 'write'
    strategy:
      fail-fast: false
      matrix:
        language: ['python']
    steps:
      - name: 'Checkout'
        uses: 'actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332'
      - name: 'Initialize CodeQL'
        uses: 'github/codeql-action/init@b611370bb5703a7efb587f9d136a52ea24c5c38c'
        with:
          languages: '${{ matrix.language }}'
      - name: 'Autobuild'
        uses: 'github/codeql-action/autobuild@b611370bb5703a7efb587f9d136a52ea24c5c38c'
      - name: 'Perform CodeQL Analysis'
        uses: 'github/codeql-action/analyze@b611370bb5703a7efb587f9d136a52ea24c5c38c'