CodeQL #459

	name: "CodeQL"

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	schedule:
	- cron: "0 7 * * 2"

	jobs:
	analyze:
	name: Analyze
	runs-on: ubuntu-latest

	steps:
	- name: Checkout repository
	uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v4
	with:
	python-version: "3.12"

	- name: Cache Poetry installation
	uses: actions/cache@v3
	with:
	path: \|
	~/.local/bin
	~/.poetry
	key: ${{ runner.os }}-poetry-${{ hashFiles('**/poetry.lock') }}
	restore-keys: \|
	${{ runner.os }}-poetry-

	- name: Cache Python dependencies
	uses: actions/cache@v3
	with:
	path: \|
	~/.cache/pypoetry
	key: ${{ runner.os }}-python-${{ hashFiles('**/poetry.lock') }}
	restore-keys: \|
	${{ runner.os }}-python-

	- name: Install system dependencies
	run: sudo apt-get update && sudo apt-get install -y build-essential libpq-dev curl

	- name: Install Poetry
	run: \|
	type poetry \|\| curl -sSL https://install.python-poetry.org \| python3 - --version 1.7.1
	echo "$HOME/.local/bin" >> $GITHUB_PATH

	- name: Install Python dependencies
	run: \|
	poetry config virtualenvs.create false
	poetry install --with dev
	playwright install firefox

	- name: Initialize CodeQL
	uses: github/codeql-action/init@v2
	with:
	languages: python
	setup-python-dependencies: false

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v2

Provide feedback