CodeQL Analysis #5
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright (c) 2024 Six After, Inc | |
| # | |
| # This source code is licensed under the Apache 2.0 License found in the | |
| # LICENSE file in the root directory of this source tree. | |
| # Ref: https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions | |
| name: "CodeQL Analysis" | |
| permissions: | |
| contents: read | |
| on: | |
| workflow_dispatch: | |
| push: | |
| branches: | |
| - main | |
| paths-ignore: | |
| - 'CHANGELOG/**' | |
| - 'CODEOWNERS' | |
| - 'docs/**' | |
| - 'LICENSE' | |
| - '**/*.md' | |
| schedule: | |
| # * * * * * <command to execute> | |
| # | | | | | | |
| # | | | | day of the week (0–6) (Sunday to Saturday; | |
| # | | | month (1–12) 7 is also Sunday on some systems) | |
| # | | day of the month (1–31) | |
| # | hour (0–23) | |
| # minute (0–59) | |
| - cron: '0 0 * * 3' | |
| jobs: | |
| analyze: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| include: | |
| - language: go | |
| permissions: | |
| security-events: write | |
| steps: | |
| - name: Preamble | |
| run: | | |
| whoami | |
| echo github ref $GITHUB_REF | |
| echo workflow $GITHUB_WORKFLOW | |
| echo home $HOME | |
| echo event name $GITHUB_EVENT_NAME | |
| echo workspace $GITHUB_WORKSPACE | |
| df -h | |
| sudo DEBIAN_FRONTEND=noninteractive apt-get update | |
| sudo DEBIAN_FRONTEND=noninteractive apt-get install -y software-properties-common ca-certificates gnupg-agent curl build-essential make | |
| # Ref: https://github.com/actions/checkout | |
| - name: Checkout Source | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| # Ref: https://github.com/actions/setup-go | |
| - name: Install Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: go.mod | |
| # Ref: https://github.com/github/codeql-action | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v3 | |
| with: | |
| languages: ${{ matrix.language }} | |
| build-mode: ${{ matrix.build-mode }} | |
| - name: Autobuild | |
| uses: github/codeql-action/autobuild@v3 | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v3 |