setup-python/.github/workflows/codeql-analysis.yml

name: CodeQL analysis

on:
  push:
    branches: [ 'main' ]
  pull_request:
  schedule:
    - cron: '0 3 * * 0'

jobs:
  call-codeQL-analysis:
    name: CodeQL analysis 
    uses: actions/reusable-workflows/.github/workflows/codeql-analysis.yml@main
Update action to use reusable workflows (#569) * Update workflows to use reusable-workflows * Update licensed.yml * Update workflows * Add links to reusable workflows * Update action to use reusable-workflows repo * Fix review points 2022-12-22 17:17:13 +08:00			`name: CodeQL analysis`
Create codeql-analysis.yml 2020-05-08 18:42:28 +08:00
			`on:`
			`push:`
Run CodeQL only on pushes to main 2022-03-24 21:48:15 +08:00			`branches: [ 'main' ]`
Add on: pull_request trigger to CodeQL workflow (#180) From February 2021, in order to provide feedback on pull requests, Code Scanning workflows must be configured with both `push` and `pull_request` triggers. This is because Code Scanning compares the results from a pull request against the results for the base branch to tell you only what has changed between the two. Early in the beta period we supported displaying results on pull requests for workflows with only `push` triggers, but have discontinued support as this proved to be less robust. See https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#scanning-pull-requests for more information on how best to configure your Code Scanning workflows. 2021-01-15 19:20:02 +08:00			`pull_request:`
Create codeql-analysis.yml 2020-05-08 18:42:28 +08:00			`schedule:`
Update action to use reusable workflows (#569) * Update workflows to use reusable-workflows * Update licensed.yml * Update workflows * Add links to reusable workflows * Update action to use reusable-workflows repo * Fix review points 2022-12-22 17:17:13 +08:00			`- cron: '0 3 * * 0'`
Create codeql-analysis.yml 2020-05-08 18:42:28 +08:00
			`jobs:`
Update action to use reusable workflows (#569) * Update workflows to use reusable-workflows * Update licensed.yml * Update workflows * Add links to reusable workflows * Update action to use reusable-workflows repo * Fix review points 2022-12-22 17:17:13 +08:00			`call-codeQL-analysis:`
			`name: CodeQL analysis`
			`uses: actions/reusable-workflows/.github/workflows/codeql-analysis.yml@main`