|
@@ -0,0 +1,55 @@
|
|
|
+name: codeql
|
|
|
+
|
|
|
+on:
|
|
|
+ push:
|
|
|
+ branches:
|
|
|
+ - 'main'
|
|
|
+ paths-ignore:
|
|
|
+ - '**/*.md'
|
|
|
+ - '**/*.txt'
|
|
|
+ - '**/*.yaml'
|
|
|
+ - '**/*_test.go'
|
|
|
+ pull_request:
|
|
|
+ paths-ignore:
|
|
|
+ - '**/*.md'
|
|
|
+ - '**/*.txt'
|
|
|
+ - '**/*.yaml'
|
|
|
+ - '**/*_test.go'
|
|
|
+
|
|
|
+jobs:
|
|
|
+ analyze:
|
|
|
+ name: Analyze
|
|
|
+ runs-on: 'ubuntu-latest'
|
|
|
+ permissions:
|
|
|
+ actions: read
|
|
|
+ contents: read
|
|
|
+ security-events: write
|
|
|
+
|
|
|
+ strategy:
|
|
|
+ fail-fast: false
|
|
|
+ matrix:
|
|
|
+ language:
|
|
|
+ - go
|
|
|
+
|
|
|
+ steps:
|
|
|
+ -
|
|
|
+ name: Checkout repository
|
|
|
+ uses: actions/checkout@v4
|
|
|
+ -
|
|
|
+ name: Update Go
|
|
|
+ uses: actions/setup-go@v4
|
|
|
+ with:
|
|
|
+ go-version-file: go.mod
|
|
|
+ -
|
|
|
+ name: Initialize CodeQL
|
|
|
+ uses: github/codeql-action/init@v2
|
|
|
+ with:
|
|
|
+ languages: ${{ matrix.language }}
|
|
|
+ -
|
|
|
+ name: Autobuild
|
|
|
+ uses: github/codeql-action/autobuild@v2
|
|
|
+ -
|
|
|
+ name: Perform CodeQL Analysis
|
|
|
+ uses: github/codeql-action/analyze@v2
|
|
|
+ with:
|
|
|
+ category: "/language:${{matrix.language}}"
|