Read-only mirrors. Development, issues and pull requests are on GitHub.

summaryrefslogtreecommitdiffhomepage
path: root/.github/workflows/codeql.yml
diff options
context:
space:
mode:
authorLeitwolf2026-11-05 07:19:33 +0300
committerGitHub2026-11-05 07:19:33 +0300
commit5c6d9ea719fc2871b58d10165def473fd9d194a4 (patch)
tree109b02492775d35a132d7495a7a6af2713993906 /.github/workflows/codeql.yml
parent7a9b7891812611f9e45e64b2c585d006a414af97 (diff)
parent81359cfe2d60dfa4a18551d72ead860082598433 (diff)
downloadtazel.net-5c6d9ea719fc2871b58d10165def473fd9d194a4.tar.gz
Merge branch 'main' into seo/robots-txtseo/robots-txt
Diffstat (limited to '.github/workflows/codeql.yml')
-rw-r--r--.github/workflows/codeql.yml36
1 files changed, 36 insertions, 0 deletions
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
new file mode 100644
index 0000000..2ff7852
--- /dev/null
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,36 @@
+# SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
+# SPDX-License-Identifier: AGPL-3.0-or-later WITH AdditionRef-Progmasoft-Patent-Grant-1.1
+
+name: CodeQL
+on:
+ push:
+ branches: [main]
+ pull_request:
+ schedule:
+ - cron: "17 5 * * 1"
+permissions:
+ actions: read
+ contents: read
+ security-events: write
+jobs:
+ analyze:
+ name: ${{ matrix.language }}
+ runs-on: ubuntu-latest
+ timeout-minutes: 30
+ strategy:
+ fail-fast: false
+ matrix:
+ language: [actions, javascript-typescript]
+ steps:
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+ with:
+ persist-credentials: false
+ - uses: github/codeql-action/init@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3
+ with:
+ languages: ${{ matrix.language }}
+ build-mode: none
+ config-file: ./.github/codeql/codeql-config.yml
+ queries: security-extended
+ - uses: github/codeql-action/analyze@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3
+ with:
+ category: /language:${{ matrix.language }}