git.iko.soy/typeable/oauth2-proxy
on 0edecd3 help sign in
typeable/oauth2-proxy/.github/workflows/codeql.yml
69 lines 1.9 kB history raw
1name: "Code scanning - action"
3on:
4 push:
5 branches:
6 - master
7 paths-ignore:
8 - '.devcontainer/**'
9 - '.vscode/**'
10 - 'contrib/**'
11 - 'docs/**'
12 pull_request:
13 # The branches below must be a subset of the branches above
14 branches:
15 - master
16 paths-ignore:
17 - '.devcontainer/**'
18 - '.vscode/**'
19 - 'contrib/**'
20 - 'docs/**'
21 schedule:
22 - cron: '0 15 * * 2'
24jobs:
25 CodeQL-Build:
27 strategy:
28 fail-fast: false
30 # CodeQL runs on ubuntu-latest and windows-latest
31 runs-on: ubuntu-latest
33 steps:
34 - name: Checkout repository
35 uses: actions/checkout@v4
36 with:
37 # We must fetch at least the immediate parents so that if this is
38 # a pull request then we can checkout the head.
39 fetch-depth: 2
41 # If this run was triggered by a pull request event, then checkout
42 # the head of the pull request instead of the merge commit.
43 - run: git checkout HEAD^2
44 if: ${{ github.event_name == 'pull_request' }}
46 # Initializes the CodeQL tools for scanning.
47 - name: Initialize CodeQL
48 uses: github/codeql-action/init@v3
49 with:
50 languages: go
52 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
53 # If this step fails, then you should remove it and run the build manually (see below)
54 - name: Autobuild
55 uses: github/codeql-action/autobuild@v3
57 # ℹ️ Command-line programs to run using the OS shell.
58 # 📚 https://git.io/JvXDl
60 # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
61 # and modify them (or add more) to build your code if your project
62 # uses a compiled language
64 #- run: |
65 # make bootstrap
66 # make release
68 - name: Perform CodeQL Analysis
69 uses: github/codeql-action/analyze@v3