| name: CodeQL Analysis | |
| on: | |
| push: | |
| branches-ignore: | |
| - 'dependabot/**' | |
| pull_request: | |
| branches: [ '**' ] | |
| schedule: | |
| - cron: '0 8 * * *' | |
| workflow_dispatch: | |
| jobs: | |
| analyze: | |
| name: Analyze | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v2 | |
| - name: Cache CodeQL database | |
| uses: actions/cache@v2 | |
| with: | |
| path: ~/.codeql | |
| key: ${{ runner.os }}-codeql-${{ hashFiles('**/qlpack.yml') }} | |
| restore-keys: ${{ runner.os }}-codeql- | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v2 | |
| with: | |
| languages: 'python' | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v2 | |