| name: "CodeQL" | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - v4-dev | |
| - "!dependabot/**" | |
| pull_request: | |
| branches: | |
| - main | |
| - v4-dev | |
| - "!dependabot/**" | |
| schedule: | |
| - cron: "0 2 * * 4" | |
| workflow_dispatch: | |
| jobs: | |
| analyze: | |
| name: Analyze | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 | |
| with: | |
| config-file: ./.github/codeql/codeql-config.yml | |
| languages: "javascript" | |
| queries: +security-and-quality | |
| - name: Autobuild | |
| uses: github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 | |
| with: | |
| category: "/language:javascript" |