Skip to content

Commit e9987ad

Browse files
authored
Merge pull request #2725 from github/aeisenberg/enable-actions-analysis
Add actions analysis to code scanning
2 parents cf6550f + 50954e7 commit e9987ad

File tree

2 files changed

+30
-2
lines changed

2 files changed

+30
-2
lines changed
Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
# Configuration for the CodeQL Actions Queries
2+
name: "CodeQL Actions Queries config"
3+
queries:
4+
- uses: security-and-quality

.github/workflows/codeql.yml

Lines changed: 26 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@ jobs:
7070
echo "Suggested matrix config for analysis job: $VERSIONS_JSON"
7171
echo "versions=${VERSIONS_JSON}" >> $GITHUB_OUTPUT
7272
73-
build:
73+
analyze-javascript:
7474
needs: [check-codeql-versions]
7575
strategy:
7676
fail-fast: false
@@ -81,7 +81,7 @@ jobs:
8181

8282
permissions:
8383
contents: read
84-
security-events: write # needed to upload results
84+
security-events: write
8585

8686
steps:
8787
- name: Checkout
@@ -100,3 +100,27 @@ jobs:
100100
uses: ./analyze
101101
with:
102102
category: "/language:javascript"
103+
104+
105+
analyze-actions:
106+
runs-on: ubuntu-latest
107+
108+
strategy:
109+
fail-fast: false
110+
111+
permissions:
112+
contents: read
113+
security-events: write
114+
115+
steps:
116+
- name: Checkout
117+
uses: actions/checkout@v4
118+
- name: Initialize CodeQL
119+
uses: ./init
120+
with:
121+
languages: actions
122+
config-file: ./.github/codeql/codeql-actions-config.yml
123+
- name: Perform CodeQL Analysis
124+
uses: ./analyze
125+
with:
126+
category: "/language:actions"

0 commit comments

Comments
 (0)