Skip to content

Commit 4295961

Browse files
feat: add codeql workflow for typescript
1 parent d06495c commit 4295961

File tree

1 file changed

+58
-0
lines changed

1 file changed

+58
-0
lines changed

.github/workflows/codeql.yml

Lines changed: 58 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,58 @@
1+
name: 'CodeQL'
2+
3+
on:
4+
push:
5+
branches: ['main']
6+
pull_request:
7+
branches: ['main']
8+
schedule:
9+
- cron: '31 8 * * 5'
10+
11+
jobs:
12+
analyze:
13+
name: Analyze (${{ matrix.language }})
14+
15+
runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
16+
timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
17+
permissions:
18+
# required for all workflows
19+
security-events: write
20+
21+
# required to fetch internal or private CodeQL packs
22+
packages: read
23+
24+
# only required for workflows in private repositories
25+
actions: read
26+
contents: read
27+
28+
strategy:
29+
fail-fast: false
30+
matrix:
31+
include:
32+
- language: javascript-typescript
33+
build-mode: none
34+
35+
steps:
36+
- name: Checkout repository
37+
uses: actions/checkout@v4
38+
39+
# Initializes the CodeQL tools for scanning.
40+
- name: Initialize CodeQL
41+
uses: github/codeql-action/init@v3
42+
with:
43+
languages: ${{ matrix.language }}
44+
build-mode: ${{ matrix.build-mode }}
45+
46+
- if: matrix.build-mode == 'manual'
47+
shell: bash
48+
run: |
49+
echo 'If you are using a "manual" build mode for one or more of the' \
50+
'languages you are analyzing, replace this with the commands to build' \
51+
'your code, for example:'
52+
echo ' make bootstrap'
53+
echo ' make release'
54+
exit 1
55+
- name: Perform CodeQL Analysis
56+
uses: github/codeql-action/analyze@v3
57+
with:
58+
category: '/language:${{matrix.language}}'

0 commit comments

Comments
 (0)