diff options
| author | Richard Steinmetz <richard@steinmetz.cloud> | 2025-08-01 09:52:24 +0200 |
|---|---|---|
| committer | Richard Steinmetz <richard@steinmetz.cloud> | 2025-08-01 09:54:06 +0200 |
| commit | e2176bcaf11bdb3754281a3b9b1e82bef177f6c6 (patch) | |
| tree | b8bbf31b8deb1ea9d0fa7bdda39604655a8cc5b5 | |
| parent | 64b142855211df40d31452b1d97bbe559cc93523 (diff) | |
| download | nextcloud-server-ci/codeql/convert-to-action.tar.gz nextcloud-server-ci/codeql/convert-to-action.zip | |
ci(codeql): convert codeql integration into a workflowci/codeql/convert-to-action
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
| -rw-r--r-- | .github/codeql-config.yml | 7 | ||||
| -rw-r--r-- | .github/workflows/codeql.yml | 47 |
2 files changed, 54 insertions, 0 deletions
diff --git a/.github/codeql-config.yml b/.github/codeql-config.yml new file mode 100644 index 00000000000..41894a60af3 --- /dev/null +++ b/.github/codeql-config.yml @@ -0,0 +1,7 @@ +# SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors +# SPDX-License-Identifier: AGPL-3.0-or-later + +name: "CodeQL config" + +paths-ignore: + - dist diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 00000000000..0e88eac1225 --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,47 @@ +# SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors +# SPDX-License-Identifier: AGPL-3.0-or-later + +name: "CodeQL Advanced" + +on: + push: + branches: [ "master", "stable*" ] + pull_request: + branches: [ "master", "stable*" ] + schedule: + - cron: '28 18 * * 1' + +jobs: + analyze: + name: Analyze (${{ matrix.language }}) + runs-on: ubuntu-latest + permissions: + # required for all workflows + security-events: write + + # required to fetch internal or private CodeQL packs + packages: read + + strategy: + fail-fast: false + matrix: + include: + - language: actions + build-mode: none + - language: javascript-typescript + build-mode: none + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v3 + with: + languages: ${{ matrix.language }} + build-mode: ${{ matrix.build-mode }} + config-file: ./.github/codeql-config.yml + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v3 + with: + category: "/language:${{matrix.language}}" |