name: "Code Analysis" on: push: branches: [master] pull_request: # The branches below must be a subset of the branches above branches: [master] schedule: - cron: '0 1 * * 4' jobs: analyze: name: Analyze if: github.repository == 'photoview/photoview' runs-on: ubuntu-20.04 # strategy: # fail-fast: false # matrix: # Override automatic language detection by changing the below list # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python'] # language: ['go', 'javascript'] # Learn more... # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection steps: - name: Checkout repository uses: actions/checkout@v2 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL uses: github/codeql-action/init@v1 with: languages: go, javascript # Run further tests queries: security-extended, security-and-quality - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v1