Skip to content

2.11.24 Update docs #210

2.11.24 Update docs

2.11.24 Update docs #210

# Name of the GitHub Actions workflow
name: CodeQL Analysis for JavaScript
on:
# Trigger the workflow on the following events:
# Scan changed files in Pull Requests (diff-aware scanning).
pull_request: {}
# Trigger the workflow on-demand through the GitHub Actions interface.
workflow_dispatch: {}
# Scan mainline branches (main and development) and report all findings.
push:
branches: ["development"]
# Define the jobs to be executed within the workflow
jobs:
build:
name: Scan JavaScript code with CodeQL
runs-on: [ 'ubuntu-latest' ] # Use the latest version of Ubuntu
permissions:
actions: read
contents: read
security-events: write
strategy:
fail-fast: false
matrix:
language: [ 'javascript' ]
# CodeQL supports [ 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift' ]
# Use only 'java-kotlin' to analyze code written in Java, Kotlin or both
# Use only 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
steps:
- name: Checkout code
uses: actions/checkout@main
# Action to check out the code from the repository
# This step fetches the codebase from the GitHub repository
- name: Initialize CodeQL
uses: github/codeql-action/init@main
with:
languages: javascript
# Action to initialize the CodeQL environment
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@main
with:
# Specify a category to distinguish between multiple analyses
# for the same tool and ref. If you don't use `category` in your workflow,
# GitHub will generate a default category name for you
category: "Scan-JavaScript-code-with-CodeQL"