| name: "CodeQL Analysis - Workflows" | |
| on: | |
| workflow_dispatch: | |
| jobs: | |
| analyze: | |
| name: "Analyze GitHub Workflows" | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write | |
| actions: read | |
| contents: read | |
| steps: | |
| - name: "Checkout repository" | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: "Initialize CodeQL" | |
| uses: github/codeql-action/init@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2 | |
| with: | |
| languages: "yaml" | |
| queries: +security-and-quality, ./.github/codeql/custom-queries.qls | |
| - name: "Perform CodeQL Analysis" | |
| uses: github/codeql-action/analyze@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2 | |