codeql.yml 678 B

12345678910111213141516171819202122232425262728293031323334
  1. name: CodeQL Security Scan
  2. on:
  3. push:
  4. branches: [main]
  5. pull_request:
  6. branches: [main]
  7. schedule:
  8. # Weekly scan every Monday at 07:00 UTC
  9. - cron: "0 7 * * 1"
  10. permissions:
  11. contents: read
  12. security-events: write
  13. jobs:
  14. analyze:
  15. name: Analyze Python
  16. runs-on: ubuntu-latest
  17. steps:
  18. - name: Checkout
  19. uses: actions/checkout@v4
  20. - name: Initialize CodeQL
  21. uses: github/codeql-action/init@v3
  22. with:
  23. languages: python
  24. config-file: .github/codeql-config.yml
  25. - name: Perform CodeQL Analysis
  26. uses: github/codeql-action/analyze@v3
  27. with:
  28. category: "/language:python"