pulp_python/.github/workflows/codeql-analysis.yml at main · pulp/pulp_python · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
# WARNING: DO NOT EDIT!
#
# This file was generated by plugin_template, and is managed by it. Please use
# './plugin-template --github pulp_python' to update this file.
#
# For more info visit https://github.com/pulp/plugin_template
---
name: "Python CodeQL"

on:
  workflow_dispatch:
  schedule:
    - cron: "37 1 * * 6"

concurrency:
  group: "${{ github.ref_name }}-${{ github.workflow }}"
  cancel-in-progress: true

jobs:
  analyze:
    name: "Analyze"
    runs-on: "ubuntu-latest"
    permissions:
      actions: "read"
      contents: "read"
      security-events: "write"

    strategy:
      fail-fast: false
      matrix:
        language:
          - "python"

    steps:
      - name: "Checkout repository"
        uses: "actions/checkout@v6"

      - name: "Initialize CodeQL"
        uses: "github/codeql-action/init@v4"
        with:
          languages: "${{ matrix.language }}"

      - name: "Perform CodeQL Analysis"
        uses: "github/codeql-action/analyze@v4"
...