Skip to content
This repository has been archived by the owner on Nov 14, 2024. It is now read-only.

Commit

Permalink
chore: enable github advanced security codeql workflow
Browse files Browse the repository at this point in the history
This PR will enable github advanced security codeql workflow
for javascript and typescript code for this repo

Ticket: DO-8117
  • Loading branch information
KartikKSrivastava committed Nov 6, 2024
1 parent a2588bf commit 1f00374
Showing 1 changed file with 57 additions and 0 deletions.
57 changes: 57 additions & 0 deletions .github/workflows/codeql.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,57 @@
name: "Advanced Security CodeQL Scan"

on:
push:
branches: ["master"]
pull_request:
branches: ["master"]
schedule:
- cron: "43 11 * * 5"

jobs:
analyze:
name: Analyze
# Runner size impacts CodeQL analysis time. To learn more, please see:
# - https://gh.io/recommended-hardware-resources-for-running-codeql
# - https://gh.io/supported-runners-and-hardware-resources
# - https://gh.io/using-larger-runners
# Consider using larger runners for possible analysis time improvements.
runs-on: "ubuntu-latest-4-cores"
timeout-minutes: 30
permissions:
security-events: write
actions: read
contents: read

strategy:
fail-fast: false
matrix:
language: ["typescript","javascript"]

steps:
- name: Checkout repository
uses: actions/checkout@v4
continue-on-error: true
with:
ref: ${{ github.sha }}

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
continue-on-error: true
with:
languages: ${{ matrix.language }}

# For more details on CodeQL"s query packs, refer to:
# https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
queries: security-extended,security-and-quality

- name: Autobuild
uses: github/codeql-action/autobuild@v3
continue-on-error: true

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
continue-on-error: true
with:
category: "/language:${{matrix.language}}"

0 comments on commit 1f00374

Please sign in to comment.