codeql.yml 867 B

12345678910111213141516171819202122232425262728293031323334353637383940414243
  1. name: "CodeQL"
  2. on:
  3. push:
  4. branches:
  5. - master
  6. - "!dependabot/**"
  7. pull_request:
  8. branches:
  9. - master
  10. - "!dependabot/**"
  11. schedule:
  12. - cron: "0 0 * * 0"
  13. workflow_dispatch:
  14. jobs:
  15. analyze:
  16. name: Analyze
  17. runs-on: ubuntu-latest
  18. permissions:
  19. actions: read
  20. contents: read
  21. security-events: write
  22. steps:
  23. - name: Clone repository
  24. uses: actions/checkout@v4
  25. with:
  26. persist-credentials: false
  27. - name: Initialize CodeQL
  28. uses: github/codeql-action/init@v3
  29. with:
  30. languages: "javascript"
  31. queries: +security-and-quality
  32. - name: Autobuild
  33. uses: github/codeql-action/autobuild@v3
  34. - name: Perform CodeQL Analysis
  35. uses: github/codeql-action/analyze@v3
  36. with:
  37. category: "/language:javascript"