Skip to content

Commit 902de3a

Browse files
committed
chore(ci): add codeql analysis
Adds CodeQL Analysis. Signed-off-by: Ryan Johnson <ryan.johnson@broadcom.com>
1 parent 29c3d0a commit 902de3a

File tree

1 file changed

+38
-0
lines changed

1 file changed

+38
-0
lines changed

.github/workflows/codeql-analysis.yml

+38
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
---
2+
name: CodeQL
3+
4+
on:
5+
push:
6+
branches:
7+
- main
8+
pull_request:
9+
branches:
10+
- main
11+
schedule:
12+
- cron: 00 00 * * 00
13+
14+
jobs:
15+
analyze:
16+
name: Analyze
17+
runs-on: ubuntu-latest
18+
strategy:
19+
fail-fast: false
20+
matrix:
21+
language:
22+
- go
23+
steps:
24+
- name: Checkout repository
25+
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
26+
- name: Setup Go
27+
uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
28+
with:
29+
go-version-file: "go.mod"
30+
cache: false
31+
- name: Initialize CodeQL
32+
uses: github/codeql-action/init@c4fb451437765abf5018c6fbf22cce1a7da1e5cc # codeql-bundle-v2.17.1
33+
with:
34+
languages: "${{ matrix.language }}"
35+
- name: Autobuild
36+
uses: github/codeql-action/autobuild@c4fb451437765abf5018c6fbf22cce1a7da1e5cc # codeql-bundle-v2.17.1
37+
- name: Perform CodeQL Analysis
38+
uses: github/codeql-action/analyze@c4fb451437765abf5018c6fbf22cce1a7da1e5cc # codeql-bundle-v2.17.1

0 commit comments

Comments
 (0)