Skip to content

Commit 8e83bae

Browse files
committed
Add codeql to do regular scans
1 parent cdf9953 commit 8e83bae

File tree

2 files changed

+37
-0
lines changed

2 files changed

+37
-0
lines changed

.github/codeql.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
paths:
2+
- "jmespath/"

.github/workflows/codeql.yml

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
name: "CodeQL"
2+
3+
on:
4+
push:
5+
branches: ["develop"]
6+
pull_request:
7+
branches: ["develop"]
8+
schedule:
9+
- cron: "0 0 * * 5"
10+
11+
permissions: "read"
12+
13+
jobs:
14+
analyze:
15+
name: "Analyze"
16+
runs-on: "ubuntu-latest"
17+
permissions:
18+
actions: read
19+
contents: read
20+
security-events: write
21+
steps:
22+
- name: "Checkout repository"
23+
uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3"
24+
25+
- name: "Run CodeQL init"
26+
uses: "github/codeql-action/init@4e94bd11f71e507f7f87df81788dff88d1dacbfb"
27+
with:
28+
config-file: "./.github/codeql.yml"
29+
languages: "python"
30+
31+
- name: "Run CodeQL autobuild"
32+
uses: "github/codeql-action/autobuild@4e94bd11f71e507f7f87df81788dff88d1dacbfb"
33+
34+
- name: "Run CodeQL analyze"
35+
uses: "github/codeql-action/analyze@4e94bd11f71e507f7f87df81788dff88d1dacbfb"

0 commit comments

Comments
 (0)