Repository navigation

Excavator: Bump go dependency go.yaml.in/yaml/v3 (#1445) #2746

	name: "CodeQL"

	on:
	push:
	branches: [ develop ]
	pull_request:
	branches: [ develop ]
	schedule:
	- cron: '25 12 * * 1'

	jobs:
	analyze:
	permissions:
	security-events: write

	name: Analyze
	runs-on: ubuntu-latest

	strategy:
	fail-fast: false
	matrix:
	language: [ 'go', 'javascript' ]

	steps:
	- name: Checkout repository
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

	# Initializes the CodeQL tools for scanning.
	- name: Initialize CodeQL
	uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4
	with:
	languages: ${{ matrix.language }}

	- name: Set Go version
	id: go_version
	run: \|
	GO_VERSION=$(sed -E -n '/^go / s/^go ([0-9]+\.[0-9]+)(\.[0-9]+)?$/\1/p' < go.mod)
	echo "version=${GO_VERSION}" >> $GITHUB_OUTPUT

	- name: Set up Go
	uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
	with:
	go-version: ${{ steps.go_version.outputs.version }}

	- name: Autobuild for CodeQL
	uses: github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4