Skip to content

Merge pull request #118 from shimastripe/renovate/github-codeql-actio… #271

Merge pull request #118 from shimastripe/renovate/github-codeql-actio…

Merge pull request #118 from shimastripe/renovate/github-codeql-actio… #271

name: "CodeQL"
on:
workflow_dispatch:
push:
schedule:
- cron: '25 0 * * 0'
concurrency:
group: codeql-${{ github.ref }}
cancel-in-progress: true
jobs:
analyze:
name: Analyze
runs-on: macos-14
env:
DEVELOPER_DIR: "/Applications/Xcode_16.0.app/Contents/Developer"
timeout-minutes: 120
permissions:
security-events: write
steps:
- name: Set up build options
run: |
defaults write com.apple.dt.Xcode IDESkipMacroFingerprintValidation -bool YES
defaults write com.apple.dt.Xcode IDESkipPackagePluginFingerprintValidatation -bool YES
- name: Checkout repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
- name: Configure SPM cache
uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
with:
path: ~/Library/Caches/org.swift.swiftpm
key: spm-${{ hashFiles('Package.swift') }}
restore-keys: |
spm-
- name: Initialize CodeQL
uses: github/codeql-action/init@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3
with:
languages: swift
- name: Autobuild
uses: github/codeql-action/autobuild@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3
with:
category: "/language:swift"