GeezerVison is showing github.com — python-tuf/.github/workflows/codeql-analysis.yml at develop · theupdateframework/python-tuf

Expand file tree

codeql-analysis.yml

Copy path

More file actions

36 lines (30 loc) · 893 Bytes

Copy path

36 lines (30 loc) · 893 Bytes

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

name: "CodeQL Analysis"

on:

push:

branches: [ develop ]

pull_request:

branches: [ develop ]

schedule:

- cron: '30 0 * * 2'

workflow_dispatch:

permissions: {}

jobs:

analyze:

name: Analyze

runs-on: ubuntu-latest

permissions:

# NOTE: If you add security critical permissions, start pinning used actions

actions: read

contents: read

security-events: write # for uploading to code-scanning dashboard

steps:

- name: Checkout repository

uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

with:

persist-credentials: false

- name: Initialize CodeQL

uses: github/codeql-action/[email protected] # zizmor: ignore[unpinned-uses]

with:

languages: 'python'

- name: Perform CodeQL Analysis

uses: github/codeql-action/[email protected] # zizmor: ignore[unpinned-uses]