Skip to content
Snippets Groups Projects
Code owners
Assign users and groups as approvers for specific file changes. Learn more.
codeql.yml 945 B
name: "CodeQL"

on:
  push:
    branches:
      - 'master'
      - 'release-**'
  pull_request:

jobs:
  files-changed:
    name: Check which files changed
    runs-on: ubuntu-22.04
    timeout-minutes: 3
    outputs:
      codeql: ${{ steps.changes.outputs.codeql }}
    steps:
      - uses: actions/checkout@v4
      - name: Test which files changed
        uses: dorny/paths-filter@v3.0.0
        id: changes
        with:
          token: ${{ github.token }}
          filters: .github/file-paths.yaml
  analyze:
    needs: files-changed
    if: needs.files-changed.outputs.codeql == 'true'
    runs-on: ubuntu-22.04
    steps:
    - name: Checkout repository
      uses: actions/checkout@v4
    - name: Initialize CodeQL
      uses: github/codeql-action/init@v2
      with:
        languages: javascript
        config-file: ./.github/codeql/codeql-config.yml
    - name: Perform CodeQL Analysis
      uses: github/codeql-action/analyze@v2