| name: "CodeQL" |
| |
| on: |
| push: |
| branches: |
| - main |
| - v4-dev |
| - v6-dev |
| - "!dependabot/**" |
| pull_request: |
| branches: |
| - main |
| - v4-dev |
| - v6-dev |
| - "!dependabot/**" |
| schedule: |
| - cron: "0 2 * * 4" |
| workflow_dispatch: |
| |
| jobs: |
| analyze: |
| name: Analyze |
| runs-on: ubuntu-latest |
| permissions: |
| security-events: write |
| |
| steps: |
| - name: Checkout repository |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 |
| with: |
| persist-credentials: false |
| |
| - name: Initialize CodeQL |
| uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 |
| with: |
| config-file: ./.github/codeql/codeql-config.yml |
| languages: "javascript" |
| queries: +security-and-quality |
| |
| - name: Autobuild |
| uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 |
| |
| - name: Perform CodeQL Analysis |
| uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 |
| with: |
| category: "/language:javascript" |
