Skip to content

Commit 2ac737d

Browse files
feat: added code scanning through CodeQL
Delete .github/workflows/security-monitoring.yml
1 parent 4c5dd1f commit 2ac737d

File tree

1 file changed

+38
-0
lines changed

1 file changed

+38
-0
lines changed

.github/workflows/codeql.yml

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
name: "CodeQL"
2+
on:
3+
push:
4+
branches: [ "master" ]
5+
pull_request:
6+
branches: [ "master" ]
7+
schedule:
8+
- cron: '30 8 * * *'
9+
jobs:
10+
analyze:
11+
name: Analyze (${{ matrix.language }})
12+
runs-on: ${{ 'ubuntu-latest' }}
13+
permissions:
14+
# required for all workflows
15+
security-events: write
16+
# required to fetch internal or private CodeQL packs
17+
packages: read
18+
19+
strategy:
20+
matrix:
21+
include:
22+
- language: python
23+
build-mode: none
24+
- language: java-kotlin
25+
build-mode: none
26+
steps:
27+
- name: Checkout repository
28+
uses: actions/checkout@v4
29+
# Initializes the CodeQL tools for scanning.
30+
- name: Initialize CodeQL
31+
uses: github/codeql-action/init@v3
32+
with:
33+
languages: ${{ matrix.language }}
34+
build-mode: ${{ matrix.build-mode }}
35+
- name: Perform CodeQL Analysis
36+
uses: github/codeql-action/analyze@v3
37+
with:
38+
category: "/language:${{matrix.language}}"

0 commit comments

Comments
 (0)