|
15 | 15 | push: |
16 | 16 | branches: [ main ] |
17 | 17 | pull_request: |
18 | | - # The branches below must be a subset of the branches above |
19 | 18 | branches: [ main ] |
20 | 19 | schedule: |
21 | | - - cron: '35 11 * * 4' |
| 20 | + - cron: '0 0 * * 1' |
| 21 | + |
| 22 | +env: |
| 23 | + DOTNET_VERSION: '9.0.x' |
22 | 24 |
|
23 | 25 | jobs: |
24 | 26 | analyze: |
25 | 27 | name: Analyze |
26 | 28 | runs-on: ubuntu-latest |
| 29 | + permissions: |
| 30 | + actions: read |
| 31 | + contents: read |
| 32 | + security-events: write |
27 | 33 |
|
28 | 34 | strategy: |
29 | 35 | fail-fast: false |
30 | 36 | matrix: |
31 | 37 | language: [ 'csharp' ] |
32 | | - # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ] |
33 | | - # Learn more: |
34 | | - # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed |
35 | 38 |
|
36 | 39 | steps: |
37 | 40 | - name: Checkout repository |
38 | | - uses: actions/checkout@v4 |
| 41 | + uses: actions/checkout@v5 |
| 42 | + |
| 43 | + - name: Setup .NET |
| 44 | + uses: actions/setup-dotnet@v4 |
| 45 | + with: |
| 46 | + dotnet-version: ${{ env.DOTNET_VERSION }} |
39 | 47 |
|
40 | | - # Initializes the CodeQL tools for scanning. |
41 | 48 | - name: Initialize CodeQL |
42 | 49 | uses: github/codeql-action/init@v3 |
43 | 50 | with: |
44 | 51 | languages: ${{ matrix.language }} |
45 | | - # If you wish to specify custom queries, you can do so here or in a config file. |
46 | | - # By default, queries listed here will override any specified in a config file. |
47 | | - # Prefix the list here with "+" to use these queries and those in the config file. |
48 | | - # queries: ./path/to/local/query, your-org/your-repo/queries@main |
49 | 52 |
|
50 | | - # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). |
51 | | - # If this step fails, then you should remove it and run the build manually (see below) |
52 | | - - name: Restore solution |
| 53 | + - name: Restore dependencies |
53 | 54 | run: dotnet restore ManagedCode.Storage.slnx |
54 | 55 |
|
55 | | - - name: Build solution |
| 56 | + - name: Build |
56 | 57 | run: dotnet build ManagedCode.Storage.slnx --no-restore |
57 | 58 |
|
58 | | - # ℹ️ Command-line programs to run using the OS shell. |
59 | | - # 📚 https://git.io/JvXDl |
60 | | - |
61 | | - # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines |
62 | | - # and modify them (or add more) to build your code if your project |
63 | | - # uses a compiled language |
64 | | - |
65 | | - #- run: | |
66 | | - # make bootstrap |
67 | | - # make release |
68 | | - |
69 | 59 | - name: Perform CodeQL Analysis |
70 | 60 | uses: github/codeql-action/analyze@v3 |
0 commit comments