This is a collection of workflows / actions for releasing and managing GitHub Actions itself
Based off of GitHub’s reusable workflow, this action is modified to run CodeQL for the actions language.
github/workflows/codeql.yml
name: "CodeQL Advanced"
on:
push:
pull_request:
workflow_dispatch:
schedule:
# https://docs.github.com/en/actions/writing-workflows/choosing-when-your-workflow-runs/events-that-trigger-workflows#schedule
- cron: '0 5 * * *'
jobs:
codeql-analysis-call:
uses: spring-io/github-actions/.github/workflows/codeql-analysis.yml@1