Skip to content

Commit 7195a07

Browse files
chen21019chen21019
committed
Run CodeQL with Go 1.27
1 parent d90b5a3 commit 7195a07

1 file changed

Lines changed: 48 additions & 0 deletions

File tree

‎.github/workflows/codeql-verification.yml‎

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
name: CodeQL verification
2+
3+
on:
4+
push:
5+
branches: [main]
6+
pull_request:
7+
branches: [main]
8+
schedule:
9+
- cron: "23 17 * * 2"
10+
11+
permissions:
12+
contents: read
13+
security-events: write
14+
15+
jobs:
16+
analyze:
17+
name: Analyze Go
18+
runs-on: ubuntu-latest
19+
timeout-minutes: 30
20+
steps:
21+
- name: Check out source
22+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
23+
with:
24+
persist-credentials: false
25+
26+
- name: Install Go 1.27
27+
uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
28+
with:
29+
go-version: 1.27.0
30+
cache: false
31+
32+
- name: Initialize CodeQL
33+
uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
34+
with:
35+
languages: go
36+
build-mode: manual
37+
queries: security-extended
38+
39+
- name: Build both Go modules
40+
shell: bash
41+
env:
42+
GOTOOLCHAIN: local
43+
run: |
44+
go build -mod=vendor ./...
45+
(cd runtime/nfs && go build -mod=vendor ./...)
46+
47+
- name: Analyze
48+
uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8

0 commit comments

Comments
 (0)