diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 058a614..58acb8a 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -1,15 +1,18 @@ -name: "CodeQL Sec Analysis" +# Updated by automated script on 2025-08-18 05:07:53 UTC +name: "CodeQL Security Analysis" on: push: branches: [ "main" ] + pull_request: + branches: [ "main" ] schedule: - - cron: '0 2 * * 1' # Weekly on Monday at 2 AM + - cron: '15 2 * * 6' # Weekly on Saturday at 02:15 jobs: analyze: - name: Analyze (${ matrix.language }) - + name: Analyze (${{ matrix.language }}) + runs-on: ubuntu-latest permissions: # required for all workflows security-events: write @@ -36,5 +39,13 @@ jobs: - name: Initialize CodeQL uses: github/codeql-action/init@v3 with: - languages: ${ matrix.language } - build-mode: ${ matrix.build-mode } + languages: ${{ matrix.language }} + build-mode: ${{ matrix.build-mode }} + + - name: Autobuild + uses: github/codeql-action/autobuild@v3 + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v3 + with: + category: "/language:${{matrix.language}}"