codeql-analysis.yml 1.2 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950
  1. name: CodeQL
  2. on:
  3. push:
  4. paths:
  5. - "**/*.go"
  6. - "go.mod"
  7. - "go.sum"
  8. pull_request:
  9. types: [opened, synchronize, reopened]
  10. paths:
  11. - "**/*.go"
  12. - "go.mod"
  13. - "go.sum"
  14. jobs:
  15. analyze:
  16. runs-on: ubuntu-latest
  17. strategy:
  18. fail-fast: false
  19. matrix:
  20. language: ["go"]
  21. steps:
  22. - name: Checkout repository
  23. uses: actions/checkout@v2
  24. - name: Initialize CodeQL
  25. uses: github/codeql-action/init@v1
  26. with:
  27. languages: ${{ matrix.language }}
  28. # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
  29. # If this step fails, then you should remove it and run the build manually (see below)
  30. - name: Autobuild
  31. uses: github/codeql-action/autobuild@v1
  32. # ℹ️ Command-line programs to run using the OS shell.
  33. # 📚 https://git.io/JvXDl
  34. # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
  35. # and modify them (or add more) to build your code if your project
  36. # uses a compiled language
  37. #- run: |
  38. # make bootstrap
  39. # make release
  40. - name: Perform CodeQL Analysis
  41. uses: github/codeql-action/analyze@v1