1
 2name: "API CodeQL"
 3
 4on:
 5  push:
 6    branches: [ "master" ]
 7  pull_request:
 8    branches: [ "master" ]
 9    paths-ignore:
10      - 'app/dashboard/**'
11  schedule:
12    - cron: '40 13 * * 2'
13
14jobs:
15  analyze:
16    name: Analyze
17    # Runner size impacts CodeQL analysis time. To learn more, please see:
18    #   - https://gh.io/recommended-hardware-resources-for-running-codeql
19    #   - https://gh.io/supported-runners-and-hardware-resources
20    #   - https://gh.io/using-larger-runners
21    # Consider using larger runners for possible analysis time improvements.
22    runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
23    timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
24    permissions:
25      # required for all workflows
26      security-events: write
27
28      # only required for workflows in private repositories
29      actions: read
30      contents: read
31
32    strategy:
33      fail-fast: false
34      matrix:
35        language: [ 'python' ]
36
37    steps:
38    - name: Checkout repository
39      uses: actions/checkout@v4
40
41    # Initializes the CodeQL tools for scanning.
42    - name: Initialize CodeQL
43      uses: github/codeql-action/init@v3
44      with:
45        languages: ${{ matrix.language }}
46
47    - name: Autobuild
48      uses: github/codeql-action/autobuild@v3
49
50    - name: Perform CodeQL Analysis
51      uses: github/codeql-action/analyze@v3
52      with:
53        category: "/language:${{matrix.language}}"