Skip to content

CodeQL

CodeQL #27

name: "CodeQL"
on:
push:
branches: [ main ] # Ensure 'main' matches your default branch
pull_request:
branches: [ main ]
schedule:
- cron: '39 15 * * 1' # Adjust cron schedule as needed
jobs:
analyze:
name: CodeQL Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
strategy:
fail-fast: false
matrix:
language: [ 'javascript' ] # Only JavaScript for portfolio page analysis
steps:
- name: Checkout repository
uses: actions/checkout@v3 # Updated to v3
- name: Initialize CodeQL
uses: github/codeql-action/init@v2 # Updated to v2
with:
languages: ${{ matrix.language }}
# Add custom queries if needed
# queries: +./path/to/local/query, your-org/your-repo/queries@main
- name: Autobuild
uses: github/codeql-action/autobuild@v2 # Updated to v2
# If Autobuild does not work for your project, comment it out and use custom build commands below
# Custom build commands (uncomment and customize if needed)
#- run: |
# make bootstrap
# make release
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2 # Updated to v2