Skip to content

Commit c8de034

Browse files
austinvazquezaustinvazquez
committed
Add CodeQL security scan workflow
Signed-off-by: Austin Vazquez <[email protected]>
1 parent 2a963a2 commit c8de034

1 file changed

Lines changed: 42 additions & 0 deletions

File tree

‎.github/workflows/codeql.yml‎

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
name: "CodeQL Scan"
2+
3+
on:
4+
push:
5+
branches:
6+
- main
7+
pull_request:
8+
branches:
9+
- main
10+
11+
permissions:
12+
contents: read
13+
14+
jobs:
15+
CodeQL-Build:
16+
if: github.repository == 'containerd/continuity'
17+
permissions:
18+
actions: read # for github/codeql-action/init to get workflow details
19+
contents: read # for actions/checkout to fetch code
20+
security-events: write # for github/codeql-action/analyze to upload SARIF results
21+
strategy:
22+
fail-fast: false
23+
24+
runs-on: ubuntu-22.04
25+
26+
timeout-minutes: 30
27+
28+
steps:
29+
- name: Checkout repository
30+
uses: actions/checkout@v3
31+
32+
- uses: actions/setup-go@v3
33+
with:
34+
go-version: 1.20.x
35+
36+
- name: Initialize CodeQL
37+
uses: github/codeql-action/init@v2
38+
39+
- run: make build binaries
40+
41+
- name: Perform CodeQL Analysis
42+
uses: github/codeql-action/analyze@v2

0 commit comments

Comments
 (0)