@@ -3,55 +3,54 @@ name: "Code scanning - action"
33on :
44 push :
55 branches-ignore :
6- - ' dependabot/**'
6+ - " dependabot/**"
77 pull_request :
88 schedule :
9- - cron : ' 0 13 * * 4'
9+ - cron : " 0 13 * * 4"
1010
1111permissions :
1212 contents : read
1313 security-events : write
1414
1515jobs :
1616 CodeQL-Build :
17-
1817 runs-on : ubuntu-latest
1918
2019 steps :
21- - name : Checkout repository
22- uses : actions/checkout@v6
23- with :
24- # We must fetch at least the immediate parents so that if this is
25- # a pull request then we can checkout the head.
26- fetch-depth : 2
27-
28- # If this run was triggered by a pull request event, then checkout
29- # the head of the pull request instead of the merge commit.
30- - run : git checkout HEAD^2
31- if : ${{ github.event_name == 'pull_request' }}
32-
33- # Initializes the CodeQL tools for scanning.
34- - name : Initialize CodeQL
35- uses : github/codeql-action/init@v4
36- # Override language selection by uncommenting this and choosing your languages
37- # with:
38- # languages: go, javascript, csharp, python, cpp, java
39-
40- # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
41- # If this step fails, then you should remove it and run the build manually (see below)
42- - name : Autobuild
43- uses : github/codeql-action/autobuild@v4
44-
45- # ℹ️ Command-line programs to run using the OS shell.
46- # 📚 https://git.io/JvXDl
47-
48- # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
49- # and modify them (or add more) to build your code if your project
50- # uses a compiled language
51-
52- # - run: |
53- # make bootstrap
54- # make release
55-
56- - name : Perform CodeQL Analysis
57- uses : github/codeql-action/analyze@v4
20+ - name : Checkout repository
21+ uses : actions/checkout@v6
22+ with :
23+ # We must fetch at least the immediate parents so that if this is
24+ # a pull request then we can checkout the head.
25+ fetch-depth : 2
26+
27+ # If this run was triggered by a pull request event, then checkout
28+ # the head of the pull request instead of the merge commit.
29+ - run : git checkout HEAD^2
30+ if : ${{ github.event_name == 'pull_request' }}
31+
32+ # Initializes the CodeQL tools for scanning.
33+ - name : Initialize CodeQL
34+ uses : github/codeql-action/init@v4
35+ # Override language selection by uncommenting this and choosing your languages
36+ # with:
37+ # languages: go, javascript, csharp, python, cpp, java
38+
39+ # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
40+ # If this step fails, then you should remove it and run the build manually (see below)
41+ - name : Autobuild
42+ uses : github/codeql-action/autobuild@v4
43+
44+ # ℹ️ Command-line programs to run using the OS shell.
45+ # 📚 https://git.io/JvXDl
46+
47+ # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
48+ # and modify them (or add more) to build your code if your project
49+ # uses a compiled language
50+
51+ # - run: |
52+ # make bootstrap
53+ # make release
54+
55+ - name : Perform CodeQL Analysis
56+ uses : github/codeql-action/analyze@v4
0 commit comments