|
1 |
| -# For most projects, this workflow file will not need changing; you simply need |
2 |
| -# to commit it to your repository. |
3 |
| -# |
4 |
| -# You may wish to alter this file to override the set of languages analyzed, |
5 |
| -# or to provide custom queries or build logic. |
6 |
| -# |
7 |
| -# ******** NOTE ******** |
8 |
| -# We have attempted to detect the languages in your repository. Please check |
9 |
| -# the `language` matrix defined below to confirm you have the correct set of |
10 |
| -# supported CodeQL languages. |
11 |
| -# |
12 | 1 | name: "CodeQL"
|
13 | 2 |
|
14 | 3 | on:
|
|
22 | 11 | jobs:
|
23 | 12 | analyze:
|
24 | 13 | name: Analyze (${{ matrix.language }})
|
25 |
| - # Runner size impacts CodeQL analysis time. To learn more, please see: |
26 |
| - # - https://gh.io/recommended-hardware-resources-for-running-codeql |
27 |
| - # - https://gh.io/supported-runners-and-hardware-resources |
28 |
| - # - https://gh.io/using-larger-runners (GitHub.com only) |
29 |
| - # Consider using larger runners or machines with greater resources for possible analysis time improvements. |
30 | 14 | runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
|
31 | 15 | timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
|
32 | 16 | permissions:
|
|
46 | 30 | include:
|
47 | 31 | - language: python
|
48 | 32 | build-mode: none
|
49 |
| - # CodeQL supports the following values keywords for 'language': 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift' |
50 |
| - # Use `c-cpp` to analyze code written in C, C++ or both |
51 |
| - # Use 'java-kotlin' to analyze code written in Java, Kotlin or both |
52 |
| - # Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both |
53 |
| - # To learn more about changing the languages that are analyzed or customizing the build mode for your analysis, |
54 |
| - # see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning. |
55 |
| - # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how |
56 |
| - # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages |
| 33 | + |
57 | 34 | steps:
|
58 | 35 | - name: Checkout repository
|
59 | 36 | uses: actions/checkout@v4
|
|
64 | 41 | with:
|
65 | 42 | languages: ${{ matrix.language }}
|
66 | 43 | build-mode: ${{ matrix.build-mode }}
|
67 |
| - # If you wish to specify custom queries, you can do so here or in a config file. |
68 |
| - # By default, queries listed here will override any specified in a config file. |
69 |
| - # Prefix the list here with "+" to use these queries and those in the config file. |
70 |
| - |
71 |
| - # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs |
72 |
| - # queries: security-extended,security-and-quality |
73 | 44 |
|
74 |
| - # If the analyze step fails for one of the languages you are analyzing with |
75 |
| - # "We were unable to automatically build your code", modify the matrix above |
76 |
| - # to set the build mode to "manual" for that language. Then modify this step |
77 |
| - # to build your code. |
78 |
| - # ℹ️ Command-line programs to run using the OS shell. |
79 |
| - # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun |
80 | 45 | - if: matrix.build-mode == 'manual'
|
81 | 46 | shell: bash
|
82 | 47 | run: |
|
|
0 commit comments