codeql-stats.yml

name: CodeQL statistics

on:
  schedule:
    - cron: '27 0 * * 1' # At 00:27 every Monday

jobs:
  stats:
    name: CodeQL statistics
    runs-on: ubuntu-latest
    if: github.repository == 'elastic/kibana' # Hack: Do not run on forks
    steps:
    - name: Checkout kibana-operations
      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      with:
        repository: 'elastic/kibana-operations'
        ref: main
        path: ./kibana-operations
        token: ${{secrets.KIBANAMACHINE_TOKEN}}

    - name: CodeQL alert statistics
      working-directory: ./kibana-operations/triage
      env:
        GITHUB_TOKEN: ${{secrets.KIBANAMACHINE_TOKEN}}
        SLACK_TOKEN: ${{secrets.CODE_SCANNING_SLACK_TOKEN}}
        CODE_SCANNING_BRANCHES: main,8.19
      run: |
        npm ci --omit=dev
        node codeql-alert-stats