codeql.yml 694 B

1234567891011121314151617181920212223242526272829303132333435
  1. name: CodeQL Security Scan
  2. on:
  3. push:
  4. branches: [main]
  5. pull_request:
  6. branches: [main]
  7. schedule:
  8. # Weekly scan every Monday at 07:00 UTC
  9. - cron: "0 7 * * 1"
  10. permissions:
  11. contents: read
  12. security-events: write
  13. actions: read
  14. jobs:
  15. analyze:
  16. name: Analyze Python
  17. runs-on: ubuntu-latest
  18. steps:
  19. - name: Checkout
  20. uses: actions/checkout@v6
  21. - name: Initialize CodeQL
  22. uses: github/codeql-action/init@v4
  23. with:
  24. languages: python
  25. config-file: .github/codeql-config.yml
  26. - name: Perform CodeQL Analysis
  27. uses: github/codeql-action/analyze@v4
  28. with:
  29. category: "/language:python"