Skip to content

Feature/development sync (#11) #27

Feature/development sync (#11)

Feature/development sync (#11) #27

name: "CodeQL Analysis"
on:
push:
branches: [ "main", "development" ]
pull_request:
branches: [ "main", "development" ]
schedule:
- cron: "0 0 * * 1" # Weekly at midnight on Mondays
permissions:
actions: read
contents: read
security-events: write # Allows CodeQL to write scan results for code scanning
jobs:
analyze:
name: Analyze Code with CodeQL
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
language: [ "python" ] # Add other languages if applicable
steps:
- name: Checkout repository
uses: actions/checkout@v3
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
with:
languages: ${{ matrix.language }}
# If your code is in a subdirectory, specify it here
# path: "your/subdirectory"
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
with:
category: "/${{ github.workflow }}"
# Optional: Save CodeQL database for further local analysis
- name: Upload CodeQL Database (Optional)
if: always()
uses: actions/upload-artifact@v3
with:
name: codeql-database
path: ./.github/codeql-database