web-sdk/.github/workflows/codeql-analysis.yml at beta · square/web-sdk · GitHub

View runs

History

48 lines (40 loc) · 1.39 KB

Raw

name: 'CodeQL'

on:

push:

branches: [beta, main]

pull_request:

# The branches below must be a subset of the branches above

branches: [beta]

schedule:

- cron: '44 22 * * 2'

jobs:

analyze:

name: Analyze

runs-on: ubuntu-latest

permissions:

actions: read

contents: read

security-events: write

strategy:

fail-fast: false

matrix:

# https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed

language: ['javascript']

steps:

- name: Checkout repository

uses: actions/checkout@v2

# Initializes the CodeQL tools for scanning.

- name: Initialize CodeQL

uses: github/codeql-action/init@v1

with:

languages: ${{ matrix.language }}

# If you wish to specify custom queries, you can do so here or in a config file.

# By default, queries listed here will override any specified in a config file.

# Prefix the list here with "+" to use these queries and those in the config file.

# queries: ./path/to/local/query, your-org/your-repo/queries@main

- name: Install dependencies

run: npm ci

- name: Build

run: npm run build

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@v1

web-sdk/.github/workflows/codeql-analysis.yml at beta · square/web-sdk · GitHub

Uh oh!

Expand file tree

Breadcrumbs

codeql-analysis.yml

Latest commit

History

Breadcrumbs

codeql-analysis.yml

File metadata and controls