github-security-testbed/.github/workflows/codeql-db-upload.yml at bc76960b883e57b31e71556ee07392e8383bd42e · timothywarner-org/github-security-testbed · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
name: Build and Upload CodeQL Database

on:
  workflow_dispatch:

jobs:
  build-codeql-db:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout juice-shop codebase
        uses: actions/checkout@v4
        with:
          path: juice-shop

      - name: Initialize CodeQL
        uses: github/codeql-action/init@v3
        with:
          languages: javascript-typescript
          source-root: juice-shop

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v3
        with:
          category: "/language:javascript-typescript"

      - name: Export CodeQL database
        run: |
          # The database is created by the init/analyze actions at $RUNNER_TEMP/codeql_databases/javascript
          cp -r $RUNNER_TEMP/codeql_databases/javascript codeql-db

      - name: Upload CodeQL database artifact
        uses: actions/upload-artifact@v4
        with:
          name: codeql-db
          path: codeql-db