required-workflow-verify-codeql-usage.yml

name: Verify CodeQL Usage
on:
  pull_request: {}
permissions:
  contents: read
  pull-requests: write
  security-events: read
jobs:
  verify:
    name: Verify CodeQL Usage
    runs-on: ubuntu-latest
    steps:
      - name: Validate CodeQL Usage
        uses: department-of-veterans-affairs/codeql-tools/verify-codeql-usage@main
        with:
          message_codeql_missing: |
            Your repository is not in compliance with OIS requirements for CodeQL usage.

            Your repository is not using CodeQL but has been identified as a repository required to perform code-scanning using CodeQL. If this pull request adds CodeQL to your repository, please ignore this message.

            Please refer to OIS guidance for configuring CodeQL using the OIS approved libraries: https://department-of-veterans-affairs.github.io/ois-swa-wiki/docs/ghas/codeql-usage

            If you have additional questions about this comment, please open a ticket here: https://github.com/department-of-veterans-affairs/github-user-requests/issues/new/choose
          message_old_analysis: |
            Your repository is not in compliance with OIS requirements for CodeQL usage. 

            Your repositories default branch has not been scanned in the last 7 days. Please update your automation to run CodeQL analysis at least once weekly.

            Please refer to OIS guidance for configuring CodeQL: https://department-of-veterans-affairs.github.io/ois-swa-wiki/docs/ghas/codeql-usage
          message_unapproved_libraries: |
            Your repository is not in compliance with OIS requirements for CodeQL usage.

            Your repository is using CodeQL, but not using OIS approved code-scanning libraries.

            Please refer to OIS guidance for configuring CodeQL using the OIS approved libraries: https://department-of-veterans-affairs.github.io/ois-swa-wiki/docs/ghas/codeql-usage

            If you have additional questions about this comment, please open a ticket here: https://github.com/department-of-veterans-affairs/github-user-requests/issues/new/choose