rhiza_codeql.yml

# For most projects, this workflow file will not need changing; you simply need
# to commit it to your repository.
#
# You may wish to alter this file to override the set of languages analyzed,
# or to provide custom queries or build logic.
#
# ******** NOTE ********
# We have attempted to detect the languages in your repository. Please check
# the `language` matrix defined below to confirm you have the correct set of
# supported CodeQL languages.
#
# ******** IMPORTANT: GitHub Advanced Security Required ********
# CodeQL is FREE for public repositories, but requires GitHub Advanced Security
# (part of GitHub Enterprise) for private repositories.
#
# This workflow automatically:
# - Runs on public repositories
# - Skips on private repositories (unless Advanced Security is available)
#
# To control this behavior, set the CODEQL_ENABLED repository variable:
# - Set to 'true' to force enable (if you have Advanced Security on private repos)
# - Set to 'false' to disable entirely
# - Leave unset for automatic behavior (recommended)
#
# To learn more about customizing this workflow, see the comments below
#
name: "(RHIZA) CODEQL"

permissions:
  security-events: write
  packages: read
  actions: read
  contents: read

on:
  push:
    branches: [ "main", "master" ]
  pull_request:
    branches: [ "main", "master" ]
  schedule:
    - cron: '27 1 * * 1'

jobs:
  codeql:
    uses: jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml@v0.18.5
    secrets: inherit