1010# supported CodeQL languages.
1111#
1212name : " CodeQL"
13-
1413on :
1514 merge_group :
1615 branches :
1716 - v2
1817 push :
19- branches : [ main ]
18+ branches : [main]
2019 pull_request :
2120 # The branches below must be a subset of the branches above
22- branches : [ main ]
21+ branches : [main]
2322 schedule :
2423 - cron : ' 24 5 * * 6'
25-
2624jobs :
2725 analyze :
2826 name : Analyze
@@ -31,45 +29,38 @@ jobs:
3129 actions : read
3230 contents : read
3331 security-events : write
34-
3532 strategy :
3633 fail-fast : false
3734 matrix :
38- language : [ 'javascript' ]
35+ language : ['javascript']
3936 # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
4037 # Learn more about CodeQL language support at https://git.io/codeql-language-support
41-
4238 steps :
43- - name : Checkout repository
44- uses : actions/checkout@v4
45-
46- # Initializes the CodeQL tools for scanning.
47- - name : Initialize CodeQL
48- uses : github/codeql-action/init@v3
49- with :
50- languages : ${{ matrix.language }}
51- config-file : ./.github/codeql/codeql-config.yml
52- # If you wish to specify custom queries, you can do so here or in a config file.
53- # By default, queries listed here will override any specified in a config file.
54- # Prefix the list here with "+" to use these queries and those in the config file.
55- # queries: ./path/to/local/query, your-org/your-repo/queries@main
56-
57- # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
58- # If this step fails, then you should remove it and run the build manually (see below)
59- - name : Autobuild
60- uses : github/codeql-action/autobuild@v3
61-
62- # ℹ️ Command-line programs to run using the OS shell.
63- # 📚 https://git.io/JvXDl
64-
65- # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
66- # and modify them (or add more) to build your code if your project
67- # uses a compiled language
68-
69- # - run: |
70- # make bootstrap
71- # make release
39+ - name : Checkout repository
40+ 41+ # Initializes the CodeQL tools for scanning.
42+ - name : Initialize CodeQL
43+ uses : github/codeql-action/init@v3
44+ with :
45+ languages : ${{ matrix.language }}
46+ config-file : ./.github/codeql/codeql-config.yml
47+ # If you wish to specify custom queries, you can do so here or in a config file.
48+ # By default, queries listed here will override any specified in a config file.
49+ # Prefix the list here with "+" to use these queries and those in the config file.
50+ # queries: ./path/to/local/query, your-org/your-repo/queries@main
51+ # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
52+ # If this step fails, then you should remove it and run the build manually (see below)
53+ - name : Autobuild
54+ uses : github/codeql-action/autobuild@v3
55+ # ℹ️ Command-line programs to run using the OS shell.
56+ # 📚 https://git.io/JvXDl
7257
73- - name : Perform CodeQL Analysis
74- uses : github/codeql-action/analyze@v3
58+ # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
59+ # and modify them (or add more) to build your code if your project
60+ # uses a compiled language
7561
62+ # - run: |
63+ # make bootstrap
64+ # make release
65+ - name : Perform CodeQL Analysis
66+ uses : github/codeql-action/analyze@v3
0 commit comments