Sandbox::https://github.com/triggerdotdev/trigger.dev/blob/main/.github/workflows/codeql.yml

Repository navigation

name: CodeQL

on:

push:

branches: [main]

pull_request:

merge_group:

permissions: {}

concurrency:

group: ${{ github.workflow }}-${{ github.ref }}

cancel-in-progress: true

jobs:

analyze:

name: Analyze (${{ matrix.language }})

if: github.repository == 'triggerdotdev/trigger.dev'

runs-on: ubuntu-latest

permissions:

contents: read

security-events: write # Upload SARIF to GitHub Security tab

strategy:

fail-fast: false

matrix:

language: [actions, javascript-typescript]

steps:

- name: Checkout repository

uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

with:

persist-credentials: false

- name: Initialize CodeQL

uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9

with:

languages: ${{ matrix.language }}

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9

with:

category: /language:${{ matrix.language }}