From 77256e5ca75b3e7428927a3ee3ca860493dbdfbb Mon Sep 17 00:00:00 2001 From: Ryan Johnson Date: Fri, 11 Oct 2024 23:35:32 -0400 Subject: [PATCH] chore(gh): add codeql analysis Adds CodeQL Analysis. Signed-off-by: Ryan Johnson --- .github/workflows/codeql-analysis.yml | 38 +++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 .github/workflows/codeql-analysis.yml diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml new file mode 100644 index 000000000..304bddecf --- /dev/null +++ b/.github/workflows/codeql-analysis.yml @@ -0,0 +1,38 @@ +--- +name: CodeQL + +on: + push: + branches: + - master + pull_request: + branches: + - main + schedule: + - cron: 00 00 * * 00 + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-latest + strategy: + fail-fast: false + matrix: + language: + - go + steps: + - name: Checkout repository + uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + - name: Setup Go + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 + with: + go-version-file: "go.mod" + cache: false + - name: Initialize CodeQL + uses: github/codeql-action/init@c4fb451437765abf5018c6fbf22cce1a7da1e5cc # codeql-bundle-v2.17.1 + with: + languages: "${{ matrix.language }}" + - name: Autobuild + uses: github/codeql-action/autobuild@c4fb451437765abf5018c6fbf22cce1a7da1e5cc # codeql-bundle-v2.17.1 + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@c4fb451437765abf5018c6fbf22cce1a7da1e5cc # codeql-bundle-v2.17.1