@@ -22,13 +22,21 @@ name: "CodeQL"
22
22
on :
23
23
push :
24
24
branches : ["main"]
25
+ paths :
26
+ - " ichub-backend/**/*.py"
27
+ - " ichub-frontend/**/*.py"
25
28
paths-ignore :
29
+ - " **/*.yml"
30
+ - " **/*.yaml"
26
31
- " **/*.md"
27
32
- " **/*.txt"
28
33
pull_request :
29
- # The branches below must be a subset of the branches above
30
- branches : ["main"]
34
+ paths :
35
+ - " ichub-backend/**/*.py"
36
+ - " ichub-frontend/**/*.py"
31
37
paths-ignore :
38
+ - " **/*.yml"
39
+ - " **/*.yaml"
32
40
- " **/*.md"
33
41
- " **/*.txt"
34
42
schedule :
45
53
contents : read
46
54
security-events : write
47
55
48
- strategy :
49
- fail-fast : false
50
- matrix :
51
- language : ["python"] # Define languages here
52
- # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby', 'swift' ]
53
- # Use only 'java' to analyze code written in Java, Kotlin or both
54
- # Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
55
- # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
56
-
57
56
steps :
58
57
- name : Checkout repository
59
58
uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
62
61
- name : Initialize CodeQL
63
62
uses : github/codeql-action/init@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
64
63
with :
65
- languages : ${{ matrix.language }}
64
+ languages : python
66
65
# If you wish to specify custom queries, you can do so here or in a config file
67
66
# By default, queries listed here will override any specified in a config file
68
67
# Prefix the list here with "+" to use these queries and those in the config file
71
70
# Use +security-extended,security-and-quality for wider security and better code quality
72
71
queries : +security-extended,security-and-quality
73
72
74
- # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift)
75
- # Automates dependency installation for Python, Ruby, and JavaScript, optimizing the CodeQL analysis setup
76
- # If this step fails, then you should remove it and run the build manually (see below)
77
- - name : Autobuild
78
- uses : github/codeql-action/autobuild@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
79
-
80
73
# ℹ️ Command-line programs to run using the OS shell.
81
74
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
82
75
89
82
- name : Perform CodeQL Analysis
90
83
uses : github/codeql-action/analyze@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
91
84
with :
92
- category : " /language:${{matrix.language}} "
85
+ category : " /language:python "
93
86
fail-on : error
0 commit comments