name: CodeQL on: push: paths: - 'src/**' - 'package-lock.json' - 'package.json' - 'tsconfig.json' - 'tsconfig.*.json' - 'vite.config.ts' branches: - main pull_request: paths: - 'src/**' - 'package-lock.json' - 'package.json' - 'tsconfig.json' - 'tsconfig.*.json' - 'vite.config.ts' branches: - main schedule: # "At 10:00 UTC (03:00 PT) on Monday" https://crontab.guru/#0_10_*_*_1 - cron: "0 10 * * 1" jobs: analyze: name: Analyze runs-on: ubuntu-latest timeout-minutes: 120 permissions: actions: read contents: read security-events: write strategy: fail-fast: false matrix: language: [ 'javascript-typescript' ] steps: - name: Checkout uses: actions/checkout@v4 - name: Setup Git User run: | git config --global user.email "h4ad+bot@viniciusl.com.br" git config --global user.name "H4ad CLI robot" - name: Initialize CodeQL uses: github/codeql-action/init@v3 with: languages: ${{ matrix.language }} - name: Autobuild uses: github/codeql-action/autobuild@v3 - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v3 with: category: "/language:${{matrix.language}}"