FilesExpand file tree

main

/

codeql.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

47 lines (39 loc) · 1.48 KB

main

/

codeql.yml

Copy path

Top

File metadata and controls

• Code
• Blame

47 lines (39 loc) · 1.48 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

name: CodeQL analysis

# Runs CodeQL security scanning for the internal and public docs repositories.

on:

pull_request:

branches:

- main

# Push runs give pull request scans a base branch for comparison.

push:

branches:

- main

permissions:

actions: read

contents: read

security-events: write

# Newer runs cancel queued or running scans for the same ref.

concurrency:

group: '${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}'

cancel-in-progress: true

jobs:

build:

if: github.repository == 'github/docs-internal' || github.repository == 'github/docs'

runs-on: ubuntu-latest

steps:

- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

- uses: github/codeql-action/init@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7

with:

languages: javascript

- uses: github/codeql-action/analyze@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7

continue-on-error: true

- uses: ./.github/actions/create-workflow-failure-issue

id: create-failure-issue

if: ${{ failure() && github.event_name != 'pull_request' }}

with:

token: ${{ secrets.DOCS_BOT_PAT_BASE }}

- uses: ./.github/actions/slack-alert

if: ${{ failure() && github.event_name != 'pull_request' }}

with:

slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

issue_url: ${{ steps.create-failure-issue.outputs.issue_url }}