Skip to content

Commit a2c3f17

Browse files
authored
Go to advanced mode codeql
CodeQL is throwing errors on the index.js file because it's not technically valid javascript.
1 parent ba5c351 commit a2c3f17

1 file changed

Lines changed: 75 additions & 0 deletions

File tree

.github/workflows/codeql.yml

Lines changed: 75 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,75 @@
1+
name: "CodeQL Advanced"
2+
3+
on:
4+
push:
5+
branches: [ "main" ]
6+
pull_request:
7+
branches: [ "main" ]
8+
schedule:
9+
- cron: '21 12 * * 1'
10+
11+
jobs:
12+
analyze:
13+
name: Analyze (${{ matrix.language }})
14+
# Runner size impacts CodeQL analysis time. To learn more, please see:
15+
# - https://gh.io/recommended-hardware-resources-for-running-codeql
16+
# - https://gh.io/supported-runners-and-hardware-resources
17+
# - https://gh.io/using-larger-runners (GitHub.com only)
18+
# Consider using larger runners or machines with greater resources for possible analysis time improvements.
19+
runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
20+
permissions:
21+
# required for all workflows
22+
security-events: write
23+
24+
# required to fetch internal or private CodeQL packs
25+
packages: read
26+
27+
# only required for workflows in private repositories
28+
actions: read
29+
contents: read
30+
31+
strategy:
32+
fail-fast: false
33+
matrix:
34+
include:
35+
- language: actions
36+
build-mode: none
37+
- language: javascript-typescript
38+
build-mode: none
39+
- language: ruby
40+
build-mode: none
41+
steps:
42+
- name: Checkout repository
43+
uses: actions/checkout@v4
44+
45+
# Initializes the CodeQL tools for scanning.
46+
- name: Initialize CodeQL
47+
uses: github/codeql-action/init@v4
48+
with:
49+
languages: ${{ matrix.language }}
50+
build-mode: ${{ matrix.build-mode }}
51+
config: |
52+
paths-ignore:
53+
- 'assets/js/index.js'
54+
55+
# If the analyze step fails for one of the languages you are analyzing with
56+
# "We were unable to automatically build your code", modify the matrix above
57+
# to set the build mode to "manual" for that language. Then modify this step
58+
# to build your code.
59+
# ℹ️ Command-line programs to run using the OS shell.
60+
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
61+
- name: Run manual build steps
62+
if: matrix.build-mode == 'manual'
63+
shell: bash
64+
run: |
65+
echo 'If you are using a "manual" build mode for one or more of the' \
66+
'languages you are analyzing, replace this with the commands to build' \
67+
'your code, for example:'
68+
echo ' make bootstrap'
69+
echo ' make release'
70+
exit 1
71+
72+
- name: Perform CodeQL Analysis
73+
uses: github/codeql-action/analyze@v4
74+
with:
75+
category: "/language:${{matrix.language}}"

0 commit comments

Comments
 (0)