codeql.yml

 1# Python CodeQL. Public repositories can upload code scanning for free.
 2# This workflow does not deploy anywhere.
 3name: codeql
 4
 5on:
 6  push:
 7    branches: [main]
 8  pull_request:
 9  schedule:
10    - cron: "17 6 * * 1"
11
12permissions:
13  contents: read
14
15concurrency:
16  group: ${{ github.workflow }}-${{ github.ref }}
17  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
18
19jobs:
20  analyze:
21    runs-on: ubuntu-latest
22    timeout-minutes: 20
23    permissions:
24      actions: read
25      contents: read
26      security-events: write
27    steps:
28      - name: Checkout
29        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
30        with:
31          persist-credentials: false
32
33      - name: Initialize CodeQL
34        uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
35        with:
36          languages: python
37          build-mode: none
38
39      - name: Analyze
40        uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
41        with:
42          category: /language:python