This repository was archived by the owner on Jan 22, 2026. It is now read-only.

Add vulns commands to the main readme #85

	name: "CodeQL Advanced"

	on:
	push:
	branches: [ "main" ]
	pull_request:
	branches: [ "main" ]
	schedule:
	- cron: '42 19 * * 5'

	permissions: {}

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	analyze:
	name: Analyze (${{ matrix.language }})
	runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') \|\| 'ubuntu-latest' }}
	permissions:
	security-events: write # Upload CodeQL results to GitHub Security tab
	packages: read # Read package metadata for dependency analysis
	actions: read # Required for workflows in private repositories
	contents: read # Read repository contents for analysis

	strategy:
	fail-fast: false
	matrix:
	include:
	- language: actions
	build-mode: none
	- language: ruby
	build-mode: none
	steps:
	- name: Checkout repository
	uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
	with:
	persist-credentials: false

	- name: Initialize CodeQL
	uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
	with:
	languages: ${{ matrix.language }}
	build-mode: ${{ matrix.build-mode }}

	- name: Run manual build steps
	if: matrix.build-mode == 'manual'
	shell: bash
	run: \|
	echo 'If you are using a "manual" build mode for one or more of the' \
	'languages you are analyzing, replace this with the commands to build' \
	'your code, for example:'
	echo ' make bootstrap'
	echo ' make release'
	exit 1

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
	with:
	category: "/language:${{matrix.language}}"

Provide feedback