codeql.yml 680 B

123456789101112131415161718192021222324252627282930313233
  1. name: CodeQL
  2. on: [push, pull_request]
  3. permissions:
  4. contents: read
  5. jobs:
  6. analyze:
  7. name: Analyze
  8. runs-on: ubuntu-latest
  9. permissions:
  10. security-events: write
  11. strategy:
  12. fail-fast: false
  13. matrix:
  14. language: [javascript]
  15. steps:
  16. - name: Checkout repository
  17. uses: actions/checkout@v3
  18. - name: Initialize CodeQL
  19. uses: github/codeql-action/init@v2
  20. with:
  21. languages: ${{ matrix.language }}
  22. queries: security-and-quality
  23. - name: Autobuild CodeQL
  24. uses: github/codeql-action/autobuild@v2
  25. - name: Perform CodeQL analysis
  26. uses: github/codeql-action/analyze@v2