| name: Run CodeQL |
| |
| on: |
| schedule: |
| - cron: 0 0 * * * |
| |
| permissions: |
| contents: read |
| |
| jobs: |
| analyze: |
| if: github.repository == 'nodejs/node' |
| name: Analyze |
| runs-on: ubuntu-slim |
| permissions: |
| actions: read |
| contents: read |
| security-events: write |
| |
| strategy: |
| fail-fast: false |
| matrix: |
| language: [cpp, javascript, python] |
| |
| steps: |
| - name: Checkout repository |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 |
| |
| # Initializes the CodeQL tools for scanning. |
| - name: Initialize CodeQL |
| uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1 |
| with: |
| languages: ${{ matrix.language }} |
| config-file: ./.github/codeql-config.yml |
| |
| - name: Autobuild |
| uses: github/codeql-action/autobuild@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1 |
| |
| - name: Perform CodeQL Analysis |
| uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1 |
| with: |
| category: /language:${{matrix.language}} |
