Files
aqtinstall/.github/workflows/codeql-analysis.yml
Dave Dalcino a998d4368b Pin checkout at v3 in all workflows
This fixes some CI warnings about using obsolete versions of NodeJS.
NodeJS 12 (from checkout@2) is at EOL, and CI warnings recommend using
NodeJS 16. The docs for actions/checkout recommend pinning at v3.

Some of these workflows were using `checkout@master`, and were thereby
already using NodeJS 16. I'm not sure that it's necessary to use v3
for these instead of master. However, the docs suggest using v3.
If at some point the authors decide to rename the `master` branch to
`main`, then we may be glad we made this change.
2023-02-11 11:31:23 -08:00

40 lines
672 B
YAML

name: "CodeQL"
on:
push:
branches:
- master
- releases/*
pull_request:
types:
- opened
- synchronize
- reopened
jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
strategy:
fail-fast: false
matrix:
language: [ 'python' ]
steps:
- name: Checkout repository
uses: actions/checkout@v3
- name: Initialize CodeQL
uses: github/codeql-action/init@v2
with:
languages: ${{ matrix.language }}
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2