| name: "CodeQL" | |
| on: | |
| push: | |
| branches: | |
| - v5-dev | |
| - "!dependabot/**" | |
| pull_request: | |
| branches: | |
| - v5-dev | |
| - "!dependabot/**" | |
| schedule: | |
| - cron: "0 2 * * 4" | |
| workflow_dispatch: | |
| jobs: | |
| analyze: | |
| name: Analyze | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 | |
| with: | |
| config-file: ./.github/codeql/codeql-config.yml | |
| languages: "javascript" | |
| queries: +security-and-quality | |
| - name: Autobuild | |
| uses: github/codeql-action/autobuild@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 | |
| with: | |
| category: "/language:javascript" |