From 1c8efa2fd04f04ed0b663206e658a25a5e8ef7f0 Mon Sep 17 00:00:00 2001 From: Dane Everitt Date: Sun, 4 Jul 2021 15:03:39 -0700 Subject: [PATCH] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 25 +++++++++++-------------- 1 file changed, 11 insertions(+), 14 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 2602fd8..18e9158 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -1,31 +1,28 @@ name: CodeQL on: push: - branches: - - 'develop' + branches: [ develop ] pull_request: - branches: - - 'develop' + branches: [ develop ] schedule: - cron: '0 9 * * 4' jobs: analyze: name: Analyze - runs-on: ubuntu-20.04 + runs-on: ubuntu-latest + permissions: + actions: read + contents: read + security-events: write strategy: fail-fast: false matrix: - language: - - go + language: [ 'go' ] steps: - - name: Code Checkout - uses: actions/checkout@v2 - - name: Checkout Head - run: git checkout HEAD^2 - if: ${{ github.event_name == 'pull_request' }} + - uses: actions/checkout@v2 - name: Initialize CodeQL uses: github/codeql-action/init@v1 with: languages: ${{ matrix.language }} - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v1 + - uses: github/codeql-action/autobuild@v1 + - uses: github/codeql-action/analyze@v1