Skip to content
This repository was archived by the owner on Nov 14, 2024. It is now read-only.

Commit 1f00374

Browse files
chore: enable github advanced security codeql workflow
This PR will enable github advanced security codeql workflow for javascript and typescript code for this repo Ticket: DO-8117
1 parent a2588bf commit 1f00374

File tree

1 file changed

+57
-0
lines changed

1 file changed

+57
-0
lines changed

.github/workflows/codeql.yaml

+57
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,57 @@
1+
name: "Advanced Security CodeQL Scan"
2+
3+
on:
4+
push:
5+
branches: ["master"]
6+
pull_request:
7+
branches: ["master"]
8+
schedule:
9+
- cron: "43 11 * * 5"
10+
11+
jobs:
12+
analyze:
13+
name: Analyze
14+
# Runner size impacts CodeQL analysis time. To learn more, please see:
15+
# - https://gh.io/recommended-hardware-resources-for-running-codeql
16+
# - https://gh.io/supported-runners-and-hardware-resources
17+
# - https://gh.io/using-larger-runners
18+
# Consider using larger runners for possible analysis time improvements.
19+
runs-on: "ubuntu-latest-4-cores"
20+
timeout-minutes: 30
21+
permissions:
22+
security-events: write
23+
actions: read
24+
contents: read
25+
26+
strategy:
27+
fail-fast: false
28+
matrix:
29+
language: ["typescript","javascript"]
30+
31+
steps:
32+
- name: Checkout repository
33+
uses: actions/checkout@v4
34+
continue-on-error: true
35+
with:
36+
ref: ${{ github.sha }}
37+
38+
# Initializes the CodeQL tools for scanning.
39+
- name: Initialize CodeQL
40+
uses: github/codeql-action/init@v3
41+
continue-on-error: true
42+
with:
43+
languages: ${{ matrix.language }}
44+
45+
# For more details on CodeQL"s query packs, refer to:
46+
# https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
47+
queries: security-extended,security-and-quality
48+
49+
- name: Autobuild
50+
uses: github/codeql-action/autobuild@v3
51+
continue-on-error: true
52+
53+
- name: Perform CodeQL Analysis
54+
uses: github/codeql-action/analyze@v3
55+
continue-on-error: true
56+
with:
57+
category: "/language:${{matrix.language}}"

0 commit comments

Comments
 (0)