From 7e04f30b02f6f134ae65feddadf0b0b831322fcb Mon Sep 17 00:00:00 2001 From: Luke Simmons Date: Tue, 13 Jul 2021 00:05:08 -0500 Subject: [PATCH] Create codeql-analysis.yml Automatically scans code for vulnerabilities on every push to master, pull request, on demand, and at 12:00 UTC every day. Fix Signed-off-by: Luke Simmons --- .github/workflows/codeql-analysis.yml | 33 +++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 .github/workflows/codeql-analysis.yml diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml new file mode 100644 index 00000000..f4dc0ba2 --- /dev/null +++ b/.github/workflows/codeql-analysis.yml @@ -0,0 +1,33 @@ +name: CodeQL + +on: + push: + branches: master + pull_request: + workflow_dispatch: + schedule: + - cron: '0 12 * * *' + +jobs: + Analyze: + runs-on: ubuntu-latest + + permissions: + actions: read + contents: read + security-events: write + + steps: + - name: Checkout repository + uses: actions/checkout@v2 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v1 + with: + languages: java + + - name: Autobuild + uses: github/codeql-action/autobuild@v1 + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v1