lunarstack/.github/workflows/codeql.yaml at main · actuallylost/lunarstack · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
name: "CodeQL"

on:
    push:
        branches: ["main"]
    pull_request:
        branches: ["main"]
    schedule:
        - cron: "43 19 * * 6"

jobs:
    analyze:
        name: Analyze
        runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
        timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
        permissions:
            # required for all workflows
            security-events: write
            # Uncomment the following lines if you're using this template in a private repository
            # actions: read
            # contents: read
        strategy:
            fail-fast: false
            matrix:
                language: ["javascript-typescript"]
        steps:
            - name: Checkout repository
              uses: actions/checkout@v4
            # Initializes the CodeQL tools for scanning.
            - name: Initialize CodeQL
              uses: github/codeql-action/init@v3
              with:
                  languages: ${{ matrix.language }}
            - name: Perform CodeQL Analysis
              uses: github/codeql-action/analyze@v3
              with:
                  category: "/language:${{matrix.language}}"