mirror of
https://github.com/actions/runner.git
synced 2025-12-10 12:36:23 +00:00
66727f76c8
From February 2021, in order to provide feedback on pull requests, Code Scanning workflows must be configured with both `push` and `pull_request` triggers. This is because Code Scanning compares the results from a pull request against the results for the base branch to tell you only what has changed between the two. Early in the beta period we supported displaying results on pull requests for workflows with only `push` triggers, but have discontinued support as this proved to be less robust. See https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#scanning-pull-requests for more information on how best to configure your Code Scanning workflows.
37 lines
807 B
YAML
37 lines
807 B
YAML
name: "Code Scanning - Action"
|
|
|
|
on:
|
|
push:
|
|
pull_request:
|
|
schedule:
|
|
- cron: '0 0 * * 0'
|
|
|
|
jobs:
|
|
CodeQL-Build:
|
|
|
|
strategy:
|
|
fail-fast: false
|
|
|
|
|
|
# CodeQL runs on ubuntu-latest, windows-latest, and macos-latest
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v2
|
|
|
|
# Initializes the CodeQL tools for scanning.
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@v1
|
|
# Override language selection by uncommenting this and choosing your languages
|
|
# with:
|
|
# languages: go, javascript, csharp, python, cpp, java
|
|
|
|
- name: Manual build
|
|
run : |
|
|
./dev.sh layout Release linux-x64
|
|
working-directory: src
|
|
|
|
- name: Perform CodeQL Analysis
|
|
uses: github/codeql-action/analyze@v1
|