From f3524e7e94fb68df8eb87c4a22a8e2976699833b Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Mon, 12 Dec 2022 16:24:06 +0100 Subject: Merging upstream version 1.10.2+dfsg. Signed-off-by: Daniel Baumann --- .github/workflows/codeql.yml | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) (limited to '.github/workflows/codeql.yml') diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 008b770..225e2ef 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -6,11 +6,12 @@ on: - main - "!dependabot/**" pull_request: - # The branches below must be a subset of the branches above branches: - main + - "!dependabot/**" schedule: - cron: "0 0 * * 0" + workflow_dispatch: jobs: analyze: @@ -22,13 +23,21 @@ jobs: security-events: write steps: - - name: Checkout repository + - name: Clone repository uses: actions/checkout@v3 + with: + persist-credentials: false - name: Initialize CodeQL uses: github/codeql-action/init@v2 with: languages: "javascript" + queries: +security-and-quality + + - name: Autobuild + uses: github/codeql-action/autobuild@v2 - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v2 + with: + category: "/language:javascript" -- cgit v1.2.3