|
1 |
| -name: "CodeQL" |
| 1 | +name: CodeQL |
2 | 2 |
|
3 | 3 | on:
|
4 | 4 | push:
|
|
10 | 10 | - cron: '41 21 * * 5'
|
11 | 11 | workflow_dispatch:
|
12 | 12 |
|
13 |
| -# This environment is necessary to avoid the following issue |
14 |
| -# https://github.com/github/codeql/issues/6321 |
15 |
| -env: |
16 |
| - CODEQL_EXTRACTOR_GO_BUILD_TRACING: 'on' |
| 13 | +permissions: |
| 14 | + security-events: write |
17 | 15 |
|
18 | 16 | jobs:
|
19 |
| - analyze: |
20 |
| - name: Analyze |
| 17 | + analyze-go: |
| 18 | + name: Analyze Go |
21 | 19 | runs-on: ubuntu-latest
|
22 |
| - permissions: |
23 |
| - actions: read |
24 |
| - contents: read |
25 |
| - security-events: write |
26 |
| - strategy: |
27 |
| - fail-fast: false |
28 |
| - matrix: |
29 |
| - language: ['go', 'javascript'] |
30 | 20 | steps:
|
31 | 21 | - uses: actions/checkout@v4
|
32 | 22 | - uses: actions/setup-go@v5
|
33 | 23 | with:
|
34 | 24 | go-version: '1.23'
|
35 |
| - if: ${{ matrix.language == 'go' }} |
36 | 25 | - uses: github/codeql-action/init@v3
|
37 | 26 | with:
|
38 | 27 | config-file: ./.github/codeql/codeql-config.yaml
|
39 |
| - languages: ${{ matrix.language }} |
40 |
| - - uses: github/codeql-action/autobuild@v3 |
41 |
| - if: ${{ matrix.language != 'go' }} |
| 28 | + languages: go |
42 | 29 | - name: Build Go sources
|
43 | 30 | run: |
|
44 | 31 | set -x
|
45 | 32 | go build -v ./cmd/actionlint
|
46 | 33 | GOOS=js GOARCH=wasm go build -v -o ./playground/main.wasm ./playground
|
47 |
| - if: ${{ matrix.language == 'go' }} |
48 | 34 | - uses: github/codeql-action/analyze@v3
|
| 35 | + with: |
| 36 | + category: "/language:go" |
| 37 | + analyze-ts: |
| 38 | + name: Analyze TypeScript |
| 39 | + runs-on: ubuntu-latest |
| 40 | + defaults: |
| 41 | + run: |
| 42 | + working-directory: ./playground |
| 43 | + steps: |
| 44 | + - uses: actions/checkout@v4 |
| 45 | + - uses: actions/setup-node@v4 |
| 46 | + with: |
| 47 | + node-version: "lts/*" |
| 48 | + - uses: github/codeql-action/init@v3 |
| 49 | + with: |
| 50 | + config-file: ./.github/codeql/codeql-config.yaml |
| 51 | + languages: javascript-typescript |
| 52 | + - name: Build playground |
| 53 | + run: make build |
| 54 | + - uses: github/codeql-action/analyze@v3 |
| 55 | + with: |
| 56 | + category: "/language:javascript-typescript" |
0 commit comments