CodeQL #14

	name: "CodeQL"

	on:
	push:
	branches: [ "main", "develop" ]
	pull_request:
	branches: [ "main", "develop" ]
	schedule:
	- cron: '21 17 * * 0' # Weekly on Sundays at 17:21 UTC

	jobs:
	analyze:
	name: Analyze (${{ matrix.language }})
	runs-on: ubuntu-latest
	timeout-minutes: 360
	permissions:
	# required for all workflows
	security-events: write
	# required to fetch internal or private CodeQL packs
	packages: read
	# only required for workflows in private repositories
	actions: read
	contents: read

	strategy:
	fail-fast: false
	matrix:
	include:
	- language: rust
	build-mode: none

	steps:
	- name: Checkout repository
	uses: actions/checkout@v4

	# Cache Rust dependencies to speed up builds
	- name: Cache Rust dependencies
	if: matrix.language == 'rust'
	uses: actions/cache@v4
	with:
	path: \|
	~/.cargo/bin/
	~/.cargo/registry/index/
	~/.cargo/registry/cache/
	~/.cargo/git/db/
	target/
	key: ${{ runner.os }}-cargo-codeql-${{ hashFiles('**/Cargo.lock') }}
	restore-keys: \|
	${{ runner.os }}-cargo-codeql-
	${{ runner.os }}-cargo-

	# Initializes the CodeQL tools for scanning.
	- name: Initialize CodeQL
	uses: github/codeql-action/init@v3
	with:
	languages: ${{ matrix.language }}
	build-mode: ${{ matrix.build-mode }}

	# For Rust with build-mode: none, CodeQL handles the build automatically
	- name: Install Rust toolchain
	if: matrix.language == 'rust'
	uses: actions-rust-lang/setup-rust-toolchain@v1
	with:
	toolchain: stable
	cache: true

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v3
	with:
	category: "/language:${{matrix.language}}"

Provide feedback