ci-codeql-analysis.yml 1004 B

12345678910111213141516171819202122232425262728293031323334353637
  1. name: "CodeQL"
  2. on:
  3. push:
  4. branches: [ master ]
  5. pull_request:
  6. branches: [ master ]
  7. schedule:
  8. - cron: '24 2 * * 4'
  9. jobs:
  10. analyze:
  11. name: Analyze
  12. runs-on: ubuntu-latest
  13. strategy:
  14. fail-fast: false
  15. matrix:
  16. language: [ 'csharp' ]
  17. steps:
  18. - name: Checkout repository
  19. uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
  20. - name: Setup .NET
  21. uses: actions/setup-dotnet@2016bd2012dba4e32de620c46fe006a3ac9f0602 # v5.0.1
  22. with:
  23. dotnet-version: '9.0.x'
  24. - name: Initialize CodeQL
  25. uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
  26. with:
  27. languages: ${{ matrix.language }}
  28. queries: +security-extended
  29. - name: Autobuild
  30. uses: github/codeql-action/autobuild@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
  31. - name: Perform CodeQL Analysis
  32. uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9