name: CodeQL

on:

push:

branches: [main]

pull_request:

branches: [main]

schedule:

- cron: '27 4 * * 1'

permissions:

contents: read

jobs:

analyze:

name: Analyze (${{ matrix.language }})

runs-on: ubuntu-latest

permissions:

security-events: write

actions: read

contents: read

strategy:

fail-fast: false

matrix:

language: ['javascript-typescript', 'python']

steps:

- name: Checkout

uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Initialize CodeQL

uses: github/codeql-action/init@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3.36.2

with:

languages: ${{ matrix.language }}

- name: Autobuild

uses: github/codeql-action/autobuild@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3.36.2

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3.36.2

with:

category: '/language:${{ matrix.language }}'