codeql-analysis.yml

# Copyright 2021 D2iQ, Inc. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

name: codeql
on:
  schedule:
    - cron: '32 21 * * 2'
defaults:
  run:
    shell: bash
jobs:
  analyze:
    name: Analyze
    runs-on: ubuntu-22.04
    defaults:
      run:
        shell: bash
    permissions:
      actions: read
      contents: read
      security-events: write
    strategy:
      fail-fast: false
      matrix:
        language: ['go']
    steps:
      - name: Checkout repository
        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
      - name: Initialize CodeQL
        uses: github/codeql-action/init@97c34c320a23709ce7144dcb00697f21d5157ec8 # v3
        with:
          languages: ${{ matrix.language }}
      - name: Install devbox
        uses: jetify-com/devbox-install-action@a03caf5813591bc882139eba6ae947930a83a427 # v0.11.0
        with:
          enable-cache: true
      - name: Build
        run: devbox run -- task build:snapshot
      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@97c34c320a23709ce7144dcb00697f21d5157ec8 # v3