mirror of
https://github.com/coredns/coredns.git
synced 2025-11-28 22:54:10 -05:00
6c26446bb7
It is recommended to pin github actions with hash so that an action is not posing an unknown security risk (as the actions itself is not written by us). Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
35 lines
798 B
YAML
35 lines
798 B
YAML
name: "CodeQL"
|
|
|
|
on:
|
|
push:
|
|
branches: [ master ]
|
|
pull_request:
|
|
branches: [ master ]
|
|
schedule:
|
|
- cron: '22 10 * * 4'
|
|
|
|
jobs:
|
|
analyze:
|
|
name: Analyze
|
|
runs-on: ubuntu-latest
|
|
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
language: [ 'go' ]
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
|
|
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@75f07e7ab2ee63cba88752d8c696324e4df67466
|
|
with:
|
|
languages: ${{ matrix.language }}
|
|
|
|
- name: Autobuild
|
|
uses: github/codeql-action/autobuild@75f07e7ab2ee63cba88752d8c696324e4df67466
|
|
|
|
- name: Perform CodeQL Analysis
|
|
uses: github/codeql-action/analyze@75f07e7ab2ee63cba88752d8c696324e4df67466
|