From 8ed364f63f52bcb53a57a9a1438e694c389d3980 Mon Sep 17 00:00:00 2001 From: Pascal Marco Caversaccio Date: Tue, 27 Feb 2024 09:30:52 +0100 Subject: [PATCH] =?UTF-8?q?=F0=9F=91=B7=20Add=20CodeQL=20CI=20Pipeline?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Pascal Marco Caversaccio --- .github/workflows/codeql.yml | 38 ++++++++++++++++++++++++++++++++++++ lib/create-util | 2 +- 2 files changed, 39 insertions(+), 1 deletion(-) create mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 00000000..d09b4784 --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,38 @@ +name: 🔍️ CodeQL + +on: [push, pull_request, workflow_dispatch] + +concurrency: + group: ${{github.workflow}}-${{github.ref}} + cancel-in-progress: true + +jobs: + analyse: + runs-on: ${{ matrix.os }} + permissions: + security-events: write + strategy: + matrix: + os: + - ubuntu-latest + language: + - javascript-typescript + - python + + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Initialise CodeQL + uses: github/codeql-action/init@v3 + with: + languages: ${{ matrix.language }} + queries: +security-and-quality + + - name: Autobuild + uses: github/codeql-action/autobuild@v3 + + - name: Perform CodeQL analysis + uses: github/codeql-action/analyze@v3 + with: + category: "/language:${{matrix.language}}" diff --git a/lib/create-util b/lib/create-util index d4588a01..e33615f3 160000 --- a/lib/create-util +++ b/lib/create-util @@ -1 +1 @@ -Subproject commit d4588a010ba7a8a2ee99b063fb42d6bcc3710853 +Subproject commit e33615f321076c8c8d894c2e46393a8942269e8e