oh-my-posh/.github/workflows/codeql.yml
dependabot[bot] 000ef40009 chore(deps): bump github/codeql-action
Bumps [github/codeql-action](https://github.com/github/codeql-action) from fd4dc5bf31bec2a626bf9a89113359953a1fba43 to 2.1.24. This release includes the previously tagged commit.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](fd4dc5bf31...904260d7d9)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-19 12:34:39 +02:00

36 lines
954 B
YAML

on:
pull_request:
paths-ignore:
- 'README.md'
- 'CONTRIBUTING.md'
- 'COPYING'
- 'website/**'
- '.github/*.md'
- '.github/FUNDING.yml'
push:
branches:
- main
name: Code QL
jobs:
code-ql:
runs-on: ubuntu-latest
defaults:
run:
working-directory: ${{ github.workspace }}/src
steps:
- name: Install Go
uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
with:
go-version: 1.18
- name: Checkout code
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
- name: Initialize CodeQL
uses: github/codeql-action/init@904260d7d935dff982205cbdb42025ce30b7a34f
with:
languages: go
- name: Autobuild
uses: github/codeql-action/autobuild@904260d7d935dff982205cbdb42025ce30b7a34f
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@904260d7d935dff982205cbdb42025ce30b7a34f