| name: "CodeQL" |
| |
| on: |
| push: |
| branches: |
| - main |
| - v4-dev |
| - v6-dev |
| - "!dependabot/**" |
| pull_request: |
| branches: |
| - main |
| - v4-dev |
| - v6-dev |
| - "!dependabot/**" |
| schedule: |
| - cron: "0 2 * * 4" |
| workflow_dispatch: |
| |
| jobs: |
| analyze: |
| name: Analyze |
| runs-on: ubuntu-latest |
| permissions: |
| security-events: write |
| |
| steps: |
| - name: Checkout repository |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 |
| with: |
| persist-credentials: false |
| |
| - name: Initialize CodeQL |
| uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0 |
| with: |
| config-file: ./.github/codeql/codeql-config.yml |
| languages: "javascript" |
| queries: +security-and-quality |
| |
| - name: Autobuild |
| uses: github/codeql-action/autobuild@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0 |
| |
| - name: Perform CodeQL Analysis |
| uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0 |
| with: |
| category: "/language:javascript" |
