3333 name : Analyze
3434 runs-on : ubuntu-latest
3535
36- strategy :
37- fail-fast : false
38- matrix :
39- language : [ 'python' ]
40- # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]
41- # Learn more...
42- # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
43-
4436 steps :
4537 - name : Harden the runner (Audit all outbound calls)
4638 uses : step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
@@ -50,31 +42,13 @@ jobs:
5042 - name : Checkout repository
5143 uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v5.0.0
5244
53- # Initializes the CodeQL tools for scanning.
5445 - name : Initialize CodeQL
5546 uses : github/codeql-action/init@17783bfb99b07f70fae080b654aed0c514057477 # v3.30.7
5647 with :
57- languages : ${{ matrix.language }}
58- # If you wish to specify custom queries, you can do so here or in a config file.
59- # By default, queries listed here will override any specified in a config file.
60- # Prefix the list here with "+" to use these queries and those in the config file.
61- # queries: ./path/to/local/query, your-org/your-repo/queries@main
48+ languages : python
6249
63- # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
64- # If this step fails, then you should remove it and run the build manually (see below)
6550 - name : Autobuild
6651 uses : github/codeql-action/autobuild@17783bfb99b07f70fae080b654aed0c514057477 # v3.30.7
6752
68- # ℹ️ Command-line programs to run using the OS shell.
69- # 📚 https://git.io/JvXDl
70-
71- # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
72- # and modify them (or add more) to build your code if your project
73- # uses a compiled language
74-
75- # - run: |
76- # make bootstrap
77- # make release
78-
7953 - name : Perform CodeQL Analysis
8054 uses : github/codeql-action/analyze@17783bfb99b07f70fae080b654aed0c514057477 # v3.30.7
0 commit comments