From 930ce651066789f6306465fad8a48abf521bd017 Mon Sep 17 00:00:00 2001 From: XhmikosR Date: Sat, 12 Nov 2022 09:22:25 +0200 Subject: Add CodeQL Action --- .github/workflows/codeql.yml | 43 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 00000000..21f00480 --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,43 @@ +name: "CodeQL" + +on: + push: + branches: + - main + - "!dependabot/**" + pull_request: + branches: + - main + - "!dependabot/**" + schedule: + - cron: "0 0 * * 0" + workflow_dispatch: + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-latest + permissions: + actions: read + contents: read + security-events: write + + steps: + - name: Checkout repository + uses: actions/checkout@v3 + with: + persist-credentials: false + + - name: Initialize CodeQL + uses: github/codeql-action/init@v2 + with: + languages: "javascript" + queries: +security-and-quality + + - name: Autobuild + uses: github/codeql-action/autobuild@v2 + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v2 + with: + category: "/language:javascript" -- cgit v1.2.3