File tree Expand file tree Collapse file tree 2 files changed +30
-2
lines changed Expand file tree Collapse file tree 2 files changed +30
-2
lines changed Original file line number Diff line number Diff line change
1
+ # Configuration for the CodeQL Actions Queries
2
+ name : " CodeQL Actions Queries config"
3
+ queries :
4
+ - uses : security-and-quality
Original file line number Diff line number Diff line change 70
70
echo "Suggested matrix config for analysis job: $VERSIONS_JSON"
71
71
echo "versions=${VERSIONS_JSON}" >> $GITHUB_OUTPUT
72
72
73
- build :
73
+ analyze-javascript :
74
74
needs : [check-codeql-versions]
75
75
strategy :
76
76
fail-fast : false
81
81
82
82
permissions :
83
83
contents : read
84
- security-events : write # needed to upload results
84
+ security-events : write
85
85
86
86
steps :
87
87
- name : Checkout
@@ -100,3 +100,27 @@ jobs:
100
100
uses : ./analyze
101
101
with :
102
102
category : " /language:javascript"
103
+
104
+
105
+ analyze-actions :
106
+ runs-on : ubuntu-latest
107
+
108
+ strategy :
109
+ fail-fast : false
110
+
111
+ permissions :
112
+ contents : read
113
+ security-events : write
114
+
115
+ steps :
116
+ - name : Checkout
117
+ uses : actions/checkout@v4
118
+ - name : Initialize CodeQL
119
+ uses : ./init
120
+ with :
121
+ languages : actions
122
+ config-file : ./.github/codeql/codeql-actions-config.yml
123
+ - name : Perform CodeQL Analysis
124
+ uses : ./analyze
125
+ with :
126
+ category : " /language:actions"
You can’t perform that action at this time.
0 commit comments