Skip to content

Commit 9c7a282

Browse files
Add CodeQL workflow for Go analysis
1 parent 4556f55 commit 9c7a282

1 file changed

Lines changed: 44 additions & 0 deletions

File tree

.github/workflows/codeql.yml

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
name: "CodeQL Advanced"
2+
3+
on:
4+
push:
5+
branches: [ "master" ]
6+
pull_request:
7+
branches: [ "master" ]
8+
schedule:
9+
- cron: '43 17 * * 2'
10+
11+
jobs:
12+
analyze:
13+
name: Analyze (${{ matrix.language }})
14+
runs-on: 'ubuntu-latest'
15+
permissions:
16+
# required for all workflows
17+
security-events: write
18+
# required to fetch internal or private CodeQL packs
19+
packages: read
20+
strategy:
21+
fail-fast: false
22+
matrix:
23+
include:
24+
- language: actions
25+
build-mode: none
26+
- language: go
27+
build-mode: autobuild
28+
go-version: [1.26.x]
29+
steps:
30+
- name: Checkout repository
31+
uses: actions/checkout@v6
32+
- name: Install Go
33+
uses: actions/setup-go@v5
34+
with:
35+
go-version: ${{ matrix.go-version }}
36+
- name: Initialize CodeQL
37+
uses: github/codeql-action/init@v4
38+
with:
39+
languages: ${{ matrix.language }}
40+
build-mode: ${{ matrix.build-mode }}
41+
- name: Perform CodeQL Analysis
42+
uses: github/codeql-action/analyze@v4
43+
with:
44+
category: "/language:${{matrix.language}}"

0 commit comments

Comments
 (0)