77 # The branches below must be a subset of the branches above
88 branches : [master]
99 schedule :
10- - cron : ' 0 6 * * 4'
10+ - cron : " 0 6 * * 4"
1111
1212permissions :
1313 contents : read
1414
1515jobs :
1616 analyze :
1717 permissions :
18- actions : read # for github/codeql-action/init to get workflow details
19- contents : read # for actions/checkout to fetch code
20- security-events : write # for github/codeql-action/autobuild to send a status report
18+ actions : read # for github/codeql-action/init to get workflow details
19+ contents : read # for actions/checkout to fetch code
20+ security-events : write # for github/codeql-action/autobuild to send a status report
2121 name : Analyze
2222 runs-on : ubuntu-latest
2323
@@ -26,48 +26,48 @@ jobs:
2626 matrix :
2727 # Override automatic language detection by changing the below list
2828 # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
29- language : [' python' ]
29+ language : [" python" ]
3030 # Learn more...
3131 # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
3232
3333 steps :
34- - name : Checkout repository
35- uses : actions/checkout@v4
36- with :
37- # We must fetch at least the immediate parents so that if this is
38- # a pull request then we can checkout the head.
39- fetch-depth : 2
34+ - name : Checkout repository
35+ uses : actions/checkout@v4
36+ with :
37+ # We must fetch at least the immediate parents so that if this is
38+ # a pull request then we can checkout the head.
39+ fetch-depth : 2
4040
41- # If this run was triggered by a pull request event, then checkout
42- # the head of the pull request instead of the merge commit.
43- - run : git checkout HEAD^2
44- if : ${{ github.event_name == 'pull_request' }}
41+ # If this run was triggered by a pull request event, then checkout
42+ # the head of the pull request instead of the merge commit.
43+ - run : git checkout HEAD^2
44+ if : ${{ github.event_name == 'pull_request' }}
4545
46- # Initializes the CodeQL tools for scanning.
47- - name : Initialize CodeQL
48- uses : github/codeql-action/init@v3
49- with :
50- languages : ${{ matrix.language }}
51- # If you wish to specify custom queries, you can do so here or in a config file.
52- # By default, queries listed here will override any specified in a config file.
53- # Prefix the list here with "+" to use these queries and those in the config file.
54- # queries: ./path/to/local/query, your-org/your-repo/queries@main
46+ # Initializes the CodeQL tools for scanning.
47+ - name : Initialize CodeQL
48+ uses : github/codeql-action/init@v3
49+ with :
50+ languages : ${{ matrix.language }}
51+ # If you wish to specify custom queries, you can do so here or in a config file.
52+ # By default, queries listed here will override any specified in a config file.
53+ # Prefix the list here with "+" to use these queries and those in the config file.
54+ # queries: ./path/to/local/query, your-org/your-repo/queries@main
5555
56- # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
57- # If this step fails, then you should remove it and run the build manually (see below)
58- - name : Autobuild
59- uses : github/codeql-action/autobuild@v3
56+ # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
57+ # If this step fails, then you should remove it and run the build manually (see below)
58+ - name : Autobuild
59+ uses : github/codeql-action/autobuild@v3
6060
61- # ℹ️ Command-line programs to run using the OS shell.
62- # 📚 https://git.io/JvXDl
61+ # ℹ️ Command-line programs to run using the OS shell.
62+ # 📚 https://git.io/JvXDl
6363
64- # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
65- # and modify them (or add more) to build your code if your project
66- # uses a compiled language
64+ # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
65+ # and modify them (or add more) to build your code if your project
66+ # uses a compiled language
6767
68- # - run: |
69- # make bootstrap
70- # make release
68+ # - run: |
69+ # make bootstrap
70+ # make release
7171
72- - name : Perform CodeQL Analysis
73- uses : github/codeql-action/analyze@v3
72+ - name : Perform CodeQL Analysis
73+ uses : github/codeql-action/analyze@v3
0 commit comments