|
5 | 5 | push:
|
6 | 6 | branches-ignore:"dependabot/**"
|
7 | 7 | schedule:
|
8 |
| - -cron:'0 4 * * 6' |
| 8 | + -cron:"0 4 * * 6" |
9 | 9 |
|
10 | 10 | permissions:
|
11 | 11 | contents:read# to fetch code (actions/checkout)
|
12 | 12 |
|
13 | 13 | jobs:
|
14 | 14 | CodeQL-Build:
|
15 |
| - |
16 | 15 | permissions:
|
17 | 16 | contents:read# to fetch code (actions/checkout)
|
18 | 17 | security-events:write# (github/codeql-action/autobuild)
|
19 | 18 |
|
20 | 19 | runs-on:ubuntu-latest
|
21 | 20 |
|
22 | 21 | steps:
|
23 |
| - -name:Checkout repository |
24 |
| -uses:actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11# v4.1.1 |
25 |
| -with: |
26 |
| -# We must fetch at least the immediate parents so that if this is |
27 |
| -# a pull request then we can checkout the head. |
28 |
| -fetch-depth:2 |
29 |
| - |
30 |
| -# If this run was triggered by a pull request event, then checkout |
31 |
| -# the head of the pull request instead of the merge commit. |
32 |
| - -run:git checkout HEAD^2 |
33 |
| -if:${{ github.event_name == 'pull_request' }} |
34 |
| - |
35 |
| -# Initializes the CodeQL tools for scanning. |
36 |
| - -name:Initialize CodeQL |
37 |
| -uses:github/codeql-action/init@74483a38d39275f33fcff5f35b679b5ca4a26a99# v2.22.5 |
38 |
| -# Override language selection by uncommenting this and choosing your languages |
39 |
| -# with: |
40 |
| -# languages: go, javascript, csharp, python, cpp, java |
41 |
| - |
42 |
| -# Autobuild attempts to build any compiled languages (C/C++, C#, or Java). |
43 |
| -# If this step fails, then you should remove it and run the build manually (see below) |
44 |
| - -name:Autobuild |
45 |
| -uses:github/codeql-action/autobuild@74483a38d39275f33fcff5f35b679b5ca4a26a99# v2.22.5 |
46 |
| - |
47 |
| -# ℹ️ Command-line programs to run using the OS shell. |
48 |
| -# 📚 https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun |
49 |
| - |
50 |
| -# ✏️ If the Autobuild fails above, remove it and uncomment the following three lines |
51 |
| -# and modify them (or add more) to build your code if your project |
52 |
| -# uses a compiled language |
53 |
| - |
54 |
| -#- run: | |
55 |
| -# make bootstrap |
56 |
| -# make release |
57 |
| - |
58 |
| - -name:Perform CodeQL Analysis |
59 |
| -uses:github/codeql-action/analyze@74483a38d39275f33fcff5f35b679b5ca4a26a99# v2.22.5 |
| 22 | +-name:Checkout repository |
| 23 | +uses:actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11# v4.1.1 |
| 24 | +with: |
| 25 | +# We must fetch at least the immediate parents so that if this is |
| 26 | +# a pull request then we can checkout the head. |
| 27 | +fetch-depth:2 |
| 28 | + |
| 29 | +# If this run was triggered by a pull request event, then checkout |
| 30 | +# the head of the pull request instead of the merge commit. |
| 31 | +-run:git checkout HEAD^2 |
| 32 | +if:${{ github.event_name == 'pull_request' }} |
| 33 | + |
| 34 | +# Initializes the CodeQL tools for scanning. |
| 35 | +-name:Initialize CodeQL |
| 36 | +uses:github/codeql-action/init@74483a38d39275f33fcff5f35b679b5ca4a26a99# v2.22.5 |
| 37 | +# Override language selection by uncommenting this and choosing your languages |
| 38 | +# with: |
| 39 | +# languages: go, javascript, csharp, python, cpp, java |
| 40 | + |
| 41 | +# Autobuild attempts to build any compiled languages (C/C++, C#, or Java). |
| 42 | +# If this step fails, then you should remove it and run the build manually (see below) |
| 43 | +-name:Autobuild |
| 44 | +uses:github/codeql-action/autobuild@74483a38d39275f33fcff5f35b679b5ca4a26a99# v2.22.5 |
| 45 | + |
| 46 | +# ℹ️ Command-line programs to run using the OS shell. |
| 47 | +# 📚 https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun |
| 48 | + |
| 49 | +# ✏️ If the Autobuild fails above, remove it and uncomment the following three lines |
| 50 | +# and modify them (or add more) to build your code if your project |
| 51 | +# uses a compiled language |
| 52 | + |
| 53 | +#- run: | |
| 54 | +# make bootstrap |
| 55 | +# make release |
| 56 | + |
| 57 | +-name:Perform CodeQL Analysis |
| 58 | +uses:github/codeql-action/analyze@74483a38d39275f33fcff5f35b679b5ca4a26a99# v2.22.5 |