Browse Source

Add CodeQL, dependency-review

pull/65/head
TheresNoTime 2 years ago
parent
commit
12b83a88f9
No known key found for this signature in database GPG Key ID: 2C15A644ABE9A27E
2 changed files with 50 additions and 0 deletions
  1. +36
    -0
      .github/workflows/codeql-analysis.yml
  2. +14
    -0
      .github/workflows/dependency-review.yml

+ 36
- 0
.github/workflows/codeql-analysis.yml View File

@@ -0,0 +1,36 @@
name: "CodeQL"

on:
push:
branches: [ "develop" ]
schedule:
- cron: '38 0 * * 5'

jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write

strategy:
fail-fast: false
matrix:
language: [ 'python' ]

steps:
- name: Checkout repository
uses: actions/checkout@v3

- name: Initialize CodeQL
uses: github/codeql-action/init@v2
with:
languages: ${{ matrix.language }}

- name: Autobuild
uses: github/codeql-action/autobuild@v2

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2

+ 14
- 0
.github/workflows/dependency-review.yml View File

@@ -0,0 +1,14 @@
name: 'Dependency Review'
on: [pull_request]

permissions:
contents: read

jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: 'Checkout Repository'
uses: actions/checkout@v3
- name: 'Dependency Review'
uses: actions/dependency-review-action@v1

Loading…
Cancel
Save