name: "CodeQL Security Analysis" on: push: branches: [main] pull_request: branches: [main] schedule: - cron: '0 6 * * 1' # Weekly Monday 6am UTC permissions: security-events: write contents: read jobs: codeql: name: CodeQL Analysis runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v7 - name: Setup PHP uses: shivammathur/setup-php@v2 with: php-version: '8.4' coverage: none extensions: xmlreader - name: Initialize CodeQL uses: github/codeql-action/[email protected] with: languages: c-cpp queries: security-extended - name: Build extension (observed by CodeQL) run: | phpize ./configure --enable-php-debugger make -j$(nproc) - name: Perform CodeQL Analysis uses: github/codeql-action/[email protected] with: category: "/language:c-cpp"