codeql.yaml

name: CodeQL

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  schedule:
    # Every Saturday 6:41 in JST
    - cron: '41 21 * * 5'
  workflow_dispatch:

permissions:
  security-events: write

jobs:
  analyze-go:
    name: Analyze Go
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: '1.23'
      - uses: github/codeql-action/init@v3
        with:
          config-file: ./.github/codeql/codeql-config.yaml
          languages: go
      - name: Build Go sources
        run: |
          set -x
          go build -v ./cmd/actionlint
          GOOS=js GOARCH=wasm go build -v -o ./playground/main.wasm ./playground
      - uses: github/codeql-action/analyze@v3
        with:
          category: "/language:go"
  analyze-ts:
    name: Analyze TypeScript
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ./playground
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: "lts/*"
      - uses: github/codeql-action/init@v3
        with:
          config-file: ./.github/codeql/codeql-config.yaml
          languages: javascript-typescript
      - name: Build playground
        run: make build
      - uses: github/codeql-action/analyze@v3
        with:
          category: "/language:javascript-typescript"