.github/workflows/codeql.yaml

   1 name: codeql
   2
   3 on:
   4     push:
   5         branches:
   6             - master
   7     pull_request:
   8         branches:
   9             - master
  10     schedule:
  11         - cron: "0 0 * * 0"
  12
  13 concurrency:
  14     group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  15     cancel-in-progress: true
  16
  17 jobs:
  18     analyze:
  19         name: Analyze
  20         runs-on: ubuntu-latest
  21         permissions:
  22             actions: read
  23             contents: read
  24             security-events: write
  25         strategy:
  26             fail-fast: false
  27             matrix:
  28                 language:
  29                     - cpp
  30         steps:
  31             - name: Checkout repository
  32               uses: actions/checkout@v3
  33               with:
  34                   fetch-depth: 0
  35
  36             - name: Initialize CodeQL
  37               uses: github/codeql-action/init@v2
  38               with:
  39                   languages: ${{ matrix.language }}
  40                   config: |
  41                       paths:
  42                         - ./examples
  43                         - ./include
  44                         - ./src
  45                         - ./tests
  46
  47             - name: Perform CodeQL Analysis
  48               uses: github/codeql-action/analyze@v2