Skip to content

Merge pull request #4 from tomasforsman/dependabot/github_actions/act… #8

Merge pull request #4 from tomasforsman/dependabot/github_actions/act…

Merge pull request #4 from tomasforsman/dependabot/github_actions/act… #8

Workflow file for this run

name: "CodeQL"
on:
push:
branches: [ main, develop ]
pull_request:
branches: [ main, develop ]
schedule:
- cron: '0 6 * * 1' # Run every Monday at 6 AM UTC
jobs:
analyze:
name: Analyze
runs-on: windows-latest
permissions:
actions: read
contents: read
security-events: write
strategy:
fail-fast: false
matrix:
language: [ 'csharp', 'javascript' ]
steps:
- name: Checkout repository
uses: actions/checkout@v5
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
with:
languages: ${{ matrix.language }}
- name: Setup .NET
if: matrix.language == 'csharp'
uses: actions/setup-dotnet@v5
with:
dotnet-version: '8.0.x'
- name: Restore dependencies
if: matrix.language == 'csharp'
run: dotnet restore
- name: Build
if: matrix.language == 'csharp'
run: dotnet build --no-restore --configuration Release
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
with:
category: "/language:${{matrix.language}}"