1name: "Code scanning - action" 2 3on: 4 schedule: 5 - cron: '26 19 * * 1' 6 7jobs: 8 CodeQL-Build: 9 10 runs-on: ubuntu-latest 11 12 steps: 13 - name: Checkout repository 14 uses: actions/checkout@v2 15 with: 16 # We must fetch at least the immediate parents so that if this is 17 # a pull request then we can checkout the head. 18 fetch-depth: 2 19 20 # If this run was triggered by a pull request event, then checkout 21 # the head of the pull request instead of the merge commit. 22 - run: git checkout HEAD^2 23 if: ${{ github.event_name == 'pull_request' }} 24 25 # Initializes the CodeQL tools for scanning. 26 - name: Initialize CodeQL 27 uses: github/codeql-action/init@v1 28 # Override language selection by uncommenting this and choosing your languages 29 # with: 30 # languages: go, javascript, csharp, python, cpp, java 31 32 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). 33 # If this step fails, then you should remove it and run the build manually (see below) 34 - name: Autobuild 35 uses: github/codeql-action/autobuild@v1 36 37 # ℹ️ Command-line programs to run using the OS shell. 38 # https://git.io/JvXDl 39 40 # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines 41 # and modify them (or add more) to build your code if your project 42 # uses a compiled language 43 44 #- run: | 45 # make bootstrap 46 # make release 47 48 - name: Perform CodeQL Analysis 49 uses: github/codeql-action/analyze@v1 50