#Github Workflow to run codeql analysis

#

#SPDX-FileCopyrightText: 2020-2021 Sebastian Wagner <wagner@cert.at>

#SPDX-License-Identifier: AGPL-3.0-or-later

name: "CodeQL"

on:

push:

branches: [develop, maintenance, master]

paths-ignore:

- '.github/**'

pull_request:

branches: [develop, maintenance]

paths-ignore:

- '.github/**'

schedule:

- cron: '0 16 * * 5'

jobs:

analyze:

name: Analyze

runs-on: ubuntu-latest

strategy:

fail-fast: false

matrix:

language: ['python']

steps:

- name: Checkout repository

uses: actions/checkout@v3

with:

fetch-depth: 2

- run: git checkout HEAD^2

if: ${{ github.event_name == 'pull_request' }}

- name: Initialize CodeQL

uses: github/codeql-action/init@v2

with:

languages: ${{ matrix.language }}

- name: Autobuild

uses: github/codeql-action/autobuild@v2

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@v2