Skip to content

CodeQL

CodeQL #510

Workflow file for this run

name: CodeQL
on:
push:
branches: [main]
pull_request:
branches: [main]
merge_group:
branches: [main]
schedule:
- cron: '45 23 * * 6'
permissions: read-all
jobs:
analyze:
name: Analyze (go)
# Runner size impacts CodeQL analysis time. To learn more, please see:
# - https://gh.io/recommended-hardware-resources-for-running-codeql
# - https://gh.io/supported-runners-and-hardware-resources
# - https://gh.io/using-larger-runners (GitHub.com only)
# Consider using larger runners or machines with greater resources for possible analysis time improvements.
runs-on: 'ubuntu-latest'
timeout-minutes: 360
permissions:
# required for all workflows
security-events: write
# required to fetch internal or private CodeQL packs
packages: read
steps:
- name: Checkout repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@8214744c546c1e5c8f03dde8fab3a7353211988d # v3
with:
languages: go
build-mode: autobuild
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@8214744c546c1e5c8f03dde8fab3a7353211988d # v3
with:
category: "/language:go"
# Currently, the upload fails for merge group checks, but still run the checks...
upload: ${{ github.event_name == 'merge_group' && 'never' || 'always' }}