CodeQL #348
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CodeQL" | |
| on: | |
| push: | |
| branches-ignore: | |
| - 'dependabot/**' | |
| pull_request: | |
| schedule: | |
| - cron: '0 8 * * 1' | |
| jobs: | |
| analyze: | |
| name: Analyze | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| steps: | |
| - name: Checkout Repository | |
| uses: actions/checkout@v2 | |
| - name: Fetch all history for all tags and branches | |
| run: git fetch --prune --unshallow | |
| - name: Setup .NET versions | |
| uses: actions/setup-dotnet@v1 | |
| with: | |
| dotnet-version: | | |
| 6.0.x | |
| 7.0.x | |
| 8.0.x | |
| include-prerelease: true | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v2 | |
| with: | |
| queries: security-and-quality | |
| languages: csharp | |
| config-file: ./.github/codeql-config.yml | |
| - name: Build source code | |
| run: dotnet build --configuration Release --framework net6.0 | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v2 |