Run CodeQL on push, pull request and workflow dispatch and update Python version
This commit is contained in:
8
.github/workflows/codeql.yml
vendored
8
.github/workflows/codeql.yml
vendored
@ -3,6 +3,11 @@ name: "CodeQL"
|
|||||||
on:
|
on:
|
||||||
schedule:
|
schedule:
|
||||||
- cron: '33 11 * * 5'
|
- cron: '33 11 * * 5'
|
||||||
|
push:
|
||||||
|
branches: [ master ]
|
||||||
|
pull_request:
|
||||||
|
branches: [ master ]
|
||||||
|
workflow_dispatch:
|
||||||
jobs:
|
jobs:
|
||||||
analyze:
|
analyze:
|
||||||
name: Analyze
|
name: Analyze
|
||||||
@ -16,7 +21,7 @@ jobs:
|
|||||||
- run: pipx install poetry
|
- run: pipx install poetry
|
||||||
- uses: actions/setup-python@v4
|
- uses: actions/setup-python@v4
|
||||||
with:
|
with:
|
||||||
python-version: '3.10'
|
python-version: '3.11'
|
||||||
cache: 'poetry'
|
cache: 'poetry'
|
||||||
- run: poetry install
|
- run: poetry install
|
||||||
- run: echo "CODEQL_PYTHON=$(poetry run which python)" >> $GITHUB_ENV
|
- run: echo "CODEQL_PYTHON=$(poetry run which python)" >> $GITHUB_ENV
|
||||||
@ -25,7 +30,6 @@ jobs:
|
|||||||
languages: 'python'
|
languages: 'python'
|
||||||
queries: security-extended,security-and-quality
|
queries: security-extended,security-and-quality
|
||||||
setup-python-dependencies: false
|
setup-python-dependencies: false
|
||||||
|
|
||||||
- uses: github/codeql-action/analyze@v2
|
- uses: github/codeql-action/analyze@v2
|
||||||
with:
|
with:
|
||||||
category: "/language:${{matrix.language}}"
|
category: "/language:${{matrix.language}}"
|
||||||
|
Reference in New Issue
Block a user