Shifts back into CI workflow.

department-of-veterans-affairs · Apr 4, 2023 · c397c49 · c397c49
1 parent 1ef3d97
commit c397c49
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 34 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
diff --git a/.github/workflows/continuous_integration.yml b/.github/workflows/continuous_integration.yml
@@ -161,3 +161,30 @@ jobs:
           reporter: github-pr-review
           stylelint_config: '.stylelintrc'
           stylelint_input: 'docroot/themes/custom/**/*.scss'
+
+  # Analyze the codebase with GitHub's CodeQL tool.
+  codeql:
+    name: CodeQL Analyze
+    # Unlike most of our continuous integration tests, this test does not have
+    # a direct analog outside of GitHub Actions.
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        language:
+          - javascript
+          - python
+    steps:
+      - name: Checkout
+        # https://github.com/actions/cache/releases/tag/v3.0.10
+        uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
+      - name: CodeQL Init
+        # https://github.com/github/codeql-action/releases/tag/codeql-bundle-20230317
+        uses: github/codeql-action/init@d23060145bc9131d50558d5d4185494a20208101
+        with:
+          languages: ${{ matrix.language }}
+      - name: CodeQL Analyze
+        # https://github.com/github/codeql-action/releases/tag/codeql-bundle-20230317
+        uses: github/codeql-action/analyze@d23060145bc9131d50558d5d4185494a20208101
+        with:
+          category: "/language:${{matrix.language}}"