💚 add codeql config

Signed-off-by: Rintaro Okamura <[email protected]>
vdaas · Jul 1, 2020 · 30395c0 · 30395c0
1 parent 58ac8c1
commit 30395c0
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/.github/codeql/codeql-config.yaml b/.github/codeql/codeql-config.yaml
@@ -0,0 +1,10 @@
+name: "Go CodeQL config"
+queries:
+  - uses: security-and-quality
+  - uses: github/codeql-go/ql/[email protected]
+
+paths:
+  - '/cmd'
+  - '/hack'
+  - '/internal'
+  - '/pkg'
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -11,6 +11,7 @@ on:
        - 'v*.*.*-*'
   pull_request:
     paths:
+      - '.github/workflows/codeql-analysis.yml'
       - '**.go'
   schedule:
     - cron: '0 1 * * 2'
@@ -39,6 +40,7 @@ jobs:
         uses: github/codeql-action/init@v1
         with:
           languages: go
+          config-file: ./.github/codeql/codeql-config.yaml
       - name: Autobuild
         uses: github/codeql-action/autobuild@v1
       - name: Perform CodeQL Analysis