Skip to content

Commit 72d1684

Browse files
Modify CodeQL workflow schedule and queries
Updated the CodeQL workflow schedule and added query options.
1 parent a04a569 commit 72d1684

1 file changed

Lines changed: 69 additions & 0 deletions

File tree

.github/workflows/codeql.yml

Lines changed: 69 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,69 @@
1+
name: "CodeQL Advanced"
2+
3+
on:
4+
push:
5+
branches: [ "master" ]
6+
pull_request:
7+
branches: [ "master" ]
8+
schedule:
9+
- cron: '0 0 * * 0'
10+
11+
jobs:
12+
analyze:
13+
name: Analyze (${{ matrix.language }})
14+
runs-on: ubuntu-latest
15+
timeout-minutes: 360
16+
permissions:
17+
security-events: write
18+
packages: read
19+
actions: read
20+
contents: read
21+
22+
strategy:
23+
fail-fast: false
24+
matrix:
25+
include:
26+
- language: rust
27+
build-mode: manual
28+
- language: javascript-typescript
29+
build-mode: none
30+
31+
steps:
32+
- name: Checkout repository
33+
uses: actions/checkout@v4
34+
35+
- name: Setup Node.js
36+
uses: actions/setup-node@v4
37+
with:
38+
node-version: 18
39+
cache: 'npm'
40+
41+
- name: Install frontend dependencies
42+
run: npm ci
43+
44+
- name: Setup Rust
45+
if: matrix.language == 'rust'
46+
uses: actions-rs/toolchain@v1
47+
with:
48+
toolchain: stable
49+
profile: minimal
50+
override: true
51+
52+
- name: Initialize CodeQL
53+
uses: github/codeql-action/init@v3
54+
with:
55+
languages: ${{ matrix.language }}
56+
build-mode: ${{ matrix.build-mode }}
57+
queries: security-extended,security-and-quality
58+
59+
- name: Build Rust backend (with Tauri)
60+
if: matrix.language == 'rust'
61+
run: |
62+
sudo apt-get update
63+
sudo apt-get install -y libwebkit2gtk-4.1-dev libgtk-3-dev libayatana-appindicator3-dev librsvg2-dev
64+
cargo build --release
65+
66+
- name: Perform CodeQL Analysis
67+
uses: github/codeql-action/analyze@v3
68+
with:
69+
category: "/language:${{matrix.language}}"

0 commit comments

Comments
 (0)