Read-only mirrors. Development, issues and pull requests are on GitHub.

summaryrefslogtreecommitdiffhomepage
path: root/.github/workflows/codeql.yml
diff options
context:
space:
mode:
authorLeitwolf2026-11-05 07:19:02 +0300
committerGitHub2026-11-05 07:19:02 +0300
commit81359cfe2d60dfa4a18551d72ead860082598433 (patch)
tree09536f4b2d4df77ddf2e6a00651de40fe37547f8 /.github/workflows/codeql.yml
parent6f114e3df68d0b20c7e58c5ffb8c46070317008a (diff)
parente8bb137bbae31105e1c753081a70c32daf835d18 (diff)
downloadtazel.net-81359cfe2d60dfa4a18551d72ead860082598433.tar.gz
Merge pull request #3 from Progmasoft/ci/quality
Add CodeQL, Codecov, Codacy and actionlint
Diffstat (limited to '.github/workflows/codeql.yml')
-rw-r--r--.github/workflows/codeql.yml36
1 files changed, 36 insertions, 0 deletions
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
new file mode 100644
index 0000000..2ff7852
--- /dev/null
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,36 @@
+# SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
+# SPDX-License-Identifier: AGPL-3.0-or-later WITH AdditionRef-Progmasoft-Patent-Grant-1.1
+
+name: CodeQL
+on:
+ push:
+ branches: [main]
+ pull_request:
+ schedule:
+ - cron: "17 5 * * 1"
+permissions:
+ actions: read
+ contents: read
+ security-events: write
+jobs:
+ analyze:
+ name: ${{ matrix.language }}
+ runs-on: ubuntu-latest
+ timeout-minutes: 30
+ strategy:
+ fail-fast: false
+ matrix:
+ language: [actions, javascript-typescript]
+ steps:
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+ with:
+ persist-credentials: false
+ - uses: github/codeql-action/init@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3
+ with:
+ languages: ${{ matrix.language }}
+ build-mode: none
+ config-file: ./.github/codeql/codeql-config.yml
+ queries: security-extended
+ - uses: github/codeql-action/analyze@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3
+ with:
+ category: /language:${{ matrix.language }}