Skip to content

Analyze CodeQL

Analyze CodeQL #140

Workflow file for this run

name: Analyze CodeQL
permissions:
contents: read
on:
push:
branches: ["main"]
pull_request:
paths-ignore:
- "**.md"
- "**.jpg"
- "**.png"
- "**.gif"
- "**.svg"
- "CODEOWNERS"
schedule:
# https://crontab.guru/#0_2_*_*_5 - at 10:00 A.M. UTC on Friday
- cron: "0 10 * * 5"
jobs:
validate:
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
steps:
- name: Checkout
uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
- name: Install tools
uses: ./.github/actions/install-tools
- name: Initialize CodeQL
uses: github/codeql-action/init@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1
with:
languages: go
config-file: ./.github/codeql.yaml
- run: make build
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1
with:
category: "/language:go"