taskcluster/.github/workflows/codeql.yml at main · taskcluster/taskcluster · GitHub

View runs

History

78 lines (68 loc) · 2.59 KB

Raw

# For most projects, this workflow file will not need changing; you simply need

# to commit it to your repository.

# You may wish to alter this file to override the set of languages analyzed,

# or to provide custom queries or build logic.

# ******** NOTE ********

# We have attempted to detect the languages in your repository. Please check

# the `language` matrix defined below to confirm you have the correct set of

# supported CodeQL languages.

name: "CodeQL"

on:

push:

branches: [ main ]

pull_request:

# The branches below must be a subset of the branches above

branches: [ main ]

schedule:

- cron: '18 19 * * 1'

permissions:

contents: read # Required: checkout repository

concurrency:

group: ${{ github.workflow }}-${{ github.ref }}

cancel-in-progress: true

jobs:

analyze:

permissions:

security-events: write # Required: upload SARIF results

name: Analyze

runs-on: ubuntu-latest

strategy:

fail-fast: false

matrix:

include:

- language: go

build-mode: manual

- language: javascript

build-mode: none

- language: python

build-mode: none

# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]

# Learn more:

# https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed

steps:

- name: Checkout repository

uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

with:

persist-credentials: false

# Initializes the CodeQL tools for scanning.

- name: Initialize CodeQL

uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9

with:

languages: ${{ matrix.language }}

build-mode: ${{ matrix.build-mode }}

dependency-caching: true

# If you wish to specify custom queries, you can do so here or in a config file.

# By default, queries listed here will override any specified in a config file.

# Prefix the list here with "+" to use these queries and those in the config file.

# queries: ./path/to/local/query, your-org/your-repo/queries@main

# Run extended queries including queries using machine learning

queries: security-extended

- name: Build Generic Worker

if: matrix.language =='go'

run: |

./workers/generic-worker/build.sh

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9

taskcluster/.github/workflows/codeql.yml at main · taskcluster/taskcluster · GitHub

Uh oh!

Expand file tree

Breadcrumbs

codeql.yml

Latest commit

History

Breadcrumbs

codeql.yml

File metadata and controls