-
Notifications
You must be signed in to change notification settings - Fork 0
29 lines (25 loc) · 841 Bytes
/
Copy pathcodeql.yml
File metadata and controls
29 lines (25 loc) · 841 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
name: CodeQL
# Static analysis (OpenSSF SAST check). TypeScript is an interpreted language
# for CodeQL, so no build step is needed — fitting for a package that ships
# TypeScript source directly.
on:
push:
branches: [main]
pull_request:
# Weekly, offset from ci.yml's Monday 06:00 UTC slot.
schedule:
- cron: "17 3 * * 5"
permissions:
contents: read
jobs:
analyze:
runs-on: ubuntu-latest
permissions:
contents: read
security-events: write # upload SARIF to code scanning
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
with:
languages: typescript
- uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2