Skip to content

Commit a7d82c9

Browse files
committed
ci(codeql-analysis.yml): set version v3 to actions/checkout
1 parent 755ff31 commit a7d82c9

File tree

1 file changed

+20
-57
lines changed

1 file changed

+20
-57
lines changed

.github/workflows/codeql-analysis.yml

Lines changed: 20 additions & 57 deletions
Original file line numberDiff line numberDiff line change
@@ -1,25 +1,13 @@
1-
# For most projects, this workflow file will not need changing; you simply need
2-
# to commit it to your repository.
3-
#
4-
# You may wish to alter this file to override the set of languages analyzed,
5-
# or to provide custom queries or build logic.
6-
#
7-
# ******** NOTE ********
8-
# We have attempted to detect the languages in your repository. Please check
9-
# the `language` matrix defined below to confirm you have the correct set of
10-
# supported CodeQL languages.
11-
#
12-
name: "CodeQL"
13-
14-
on:
1+
name: CodeQL
2+
"on":
153
push:
16-
branches: [ "master" ]
4+
branches:
5+
- master
176
pull_request:
18-
# The branches below must be a subset of the branches above
19-
branches: [ "master" ]
7+
branches:
8+
- master
209
schedule:
21-
- cron: '28 11 * * 6'
22-
10+
- cron: 28 11 * * 6
2311
jobs:
2412
analyze:
2513
name: Analyze
@@ -28,45 +16,20 @@ jobs:
2816
actions: read
2917
contents: read
3018
security-events: write
31-
3219
strategy:
3320
fail-fast: false
3421
matrix:
35-
language: [ 'typescript' ]
36-
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
37-
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
38-
22+
language:
23+
- typescript
3924
steps:
40-
- name: Checkout repository
41-
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
42-
43-
# Initializes the CodeQL tools for scanning.
44-
- name: Initialize CodeQL
45-
uses: github/codeql-action/init@86f3159a697a097a813ad9bfa0002412d97690a4 # tag=v2
46-
with:
47-
languages: ${{ matrix.language }}
48-
# If you wish to specify custom queries, you can do so here or in a config file.
49-
# By default, queries listed here will override any specified in a config file.
50-
# Prefix the list here with "+" to use these queries and those in the config file.
51-
52-
# Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
53-
# queries: security-extended,security-and-quality
54-
55-
56-
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
57-
# If this step fails, then you should remove it and run the build manually (see below)
58-
- name: Autobuild
59-
uses: github/codeql-action/autobuild@86f3159a697a097a813ad9bfa0002412d97690a4 # tag=v2
60-
61-
# ℹ️ Command-line programs to run using the OS shell.
62-
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
63-
64-
# If the Autobuild fails above, remove it and uncomment the following three lines.
65-
# modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
66-
67-
# - run: |
68-
# echo "Run, Build Application using script"
69-
# ./location_of_script_within_repo/buildscript.sh
70-
71-
- name: Perform CodeQL Analysis
72-
uses: github/codeql-action/analyze@86f3159a697a097a813ad9bfa0002412d97690a4 # tag=v2
25+
- name: Checkout repository
26+
uses: actions/checkout@v3
27+
- name: Initialize CodeQL
28+
uses: github/codeql-action/init@86f3159a697a097a813ad9bfa0002412d97690a4
29+
with:
30+
languages: ${{ matrix.language }}
31+
- name: Autobuild
32+
uses: >-
33+
github/codeql-action/autobuild@86f3159a697a097a813ad9bfa0002412d97690a4
34+
- name: Perform CodeQL Analysis
35+
uses: github/codeql-action/analyze@86f3159a697a097a813ad9bfa0002412d97690a4

0 commit comments

Comments
 (0)