update to merge contribution for codeQL (#3289)

microsoft · Jun 16, 2020 · a913a6b · a913a6b
1 parent 4880c8c
commit a913a6b
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/.github/workflows/ci-weekly.yml b/.github/workflows/ci-weekly.yml
@@ -48,3 +48,25 @@ jobs:
 
     - name: Execute unit tests
       run: lerna run test --stream
+
+  code_scan:
+    name: Validate Security
+
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v2
+      with:
+        fetch-depth: 2
+
+    - run: git checkout HEAD^2
+      if: ${{ github.event_name == 'pull_request' }}
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v1
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1