codeql.yml

name: CodeQL-Cron

on:
  schedule:
    - cron: '0 0 * * *'

  workflow_dispatch:

permissions:
  contents: read

jobs:
  codeql:
    runs-on: ubuntu-latest
    permissions:
      security-events: write
    
    strategy:
      fail-fast: false
      matrix:
        include:
          - language: go
            build-mode: manual

    steps:
    - name: Checkout Code
      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11

    - name: Initialize CodeQL
      uses: github/codeql-action/init@f3feb00acb00f31a6f60280e6ace9ca31d91c76a
      with:
        languages: ${{ matrix.language }}

    - name: SetUpGo
      uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
      with:
        go-version: 1.22

    - name: InstallDependencies
      run: |
        go get -u ./cmd/radar/

    - name: Build
      run: go build -v ./cmd/radar/main.go    

    - name: Perform CodeQL Analysis
      uses: github/codeql-action/analyze@f3feb00acb00f31a6f60280e6ace9ca31d91c76a
      with:
        category: "/language:${{matrix.language}}"