1name: "Code scanning - action" 2 3on: 4 push: 5 branches: 6 - develop 7 - master 8 - release/* 9 pull_request: 10 schedule: 11 - cron: '0 19 * * 1' 12 13jobs: 14 CodeQL-Build: 15 16 runs-on: ubuntu-latest 17 18 steps: 19 - name: Checkout repository 20 uses: actions/checkout@v2 21 with: 22 # We must fetch at least the immediate parents so that if this is 23 # a pull request then we can checkout the head. 24 fetch-depth: 2 25 26 # If this run was triggered by a pull request event, then checkout 27 # the head of the pull request instead of the merge commit. 28 - run: git checkout HEAD^2 29 if: ${{ github.event_name == 'pull_request' }} 30 31 # Initializes the CodeQL tools for scanning. 32 - name: Initialize CodeQL 33 uses: github/codeql-action/init@v1 34 # Override language selection by uncommenting this and choosing your languages 35 # with: 36 # languages: go, javascript, csharp, python, cpp, java 37 38 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). 39 # If this step fails, then you should remove it and run the build manually (see below) 40 - name: Autobuild 41 uses: github/codeql-action/autobuild@v1 42 43 # ℹ️ Command-line programs to run using the OS shell. 44 # �� https://git.io/JvXDl 45 46 # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines 47 # and modify them (or add more) to build your code if your project 48 # uses a compiled language 49 50 #- run: | 51 # make bootstrap 52 # make release 53 54 - name: Perform CodeQL Analysis 55 uses: github/codeql-action/analyze@v1 56