codeql.yml RawHistoryFolder

1name: CodeQL
2
3on:
4  push:
5    branches: [main]
6  pull_request:
7    branches: [main]
8  schedule:
9    - cron: "17 3 * * 1"
10
11permissions:
12  contents: read
13
14jobs:
15  analyze:
16    name: CodeQL (${{ matrix.language }})
17    runs-on: ubuntu-latest
18    permissions:
19      actions: read
20      contents: read
21      packages: read
22      security-events: write
23    strategy:
24      fail-fast: false
25      matrix:
26        include:
27          - language: actions
28            build-mode: none
29          - language: go
30            build-mode: manual
31
32    steps:
33      - name: Checkout repository
34        uses: actions/checkout@v6
35
36      - name: Set up Go
37        if: matrix.language == 'go'
38        uses: actions/setup-go@v5
39        with:
40          go-version: "1.27.x"
41
42      - name: Initialize CodeQL
43        uses: github/codeql-action/init@v4
44        with:
45          languages: ${{ matrix.language }}
46          build-mode: ${{ matrix.build-mode }}
47
48      - name: Build Go code
49        if: matrix.language == 'go'
50        run: go build ./...
51
52      - name: Perform CodeQL analysis
53        uses: github/codeql-action/analyze@v4
54        with:
55          category: /language:${{ matrix.language }}