Skip to content

CodeQL Analysis

CodeQL Analysis #6

# Copyright (c) 2024 Six After, Inc
#
# This source code is licensed under the Apache 2.0 License found in the
# LICENSE file in the root directory of this source tree.
# Ref: https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions
name: "CodeQL Analysis"
permissions:
contents: read
on:
workflow_dispatch:
push:
branches:
- main
paths-ignore:
- 'CHANGELOG/**'
- 'CODEOWNERS'
- 'docs/**'
- 'LICENSE'
- '**/*.md'
schedule:
# * * * * * <command to execute>
# | | | | |
# | | | | day of the week (0–6) (Sunday to Saturday;
# | | | month (1–12) 7 is also Sunday on some systems)
# | | day of the month (1–31)
# | hour (0–23)
# minute (0–59)
- cron: '0 0 * * 3'
jobs:
analyze:
runs-on: ubuntu-latest
strategy:
matrix:
include:
- language: go
permissions:
security-events: write
steps:
- name: Preamble
run: |
whoami
echo github ref $GITHUB_REF
echo workflow $GITHUB_WORKFLOW
echo home $HOME
echo event name $GITHUB_EVENT_NAME
echo workspace $GITHUB_WORKSPACE
df -h
sudo DEBIAN_FRONTEND=noninteractive apt-get update
sudo DEBIAN_FRONTEND=noninteractive apt-get install -y software-properties-common ca-certificates gnupg-agent curl build-essential make
# Ref: https://github.com/actions/checkout
- name: Checkout Source
uses: actions/checkout@v4
with:
fetch-depth: 0
# Ref: https://github.com/actions/setup-go
- name: Install Go
uses: actions/setup-go@v5
with:
go-version-file: go.mod
# Ref: https://github.com/github/codeql-action
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
- name: Autobuild
uses: github/codeql-action/autobuild@v3
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3