Skip to content

renovate: Monitor kubernetes-sigs/bom #5078

renovate: Monitor kubernetes-sigs/bom

renovate: Monitor kubernetes-sigs/bom #5078

Workflow file for this run

name: codeql
on:
pull_request:
branches:
- main
paths-ignore:
- 'docs/**'
push:
branches:
- main
paths-ignore:
- 'docs/**'
schedule:
- cron: "45 6 * * 3"
permissions: read-all
jobs:
check_changes:
name: Deduce required tests from code changes
if: ${{ github.event_name == 'pull_request' }}
runs-on: ubuntu-20.04
outputs:
go-changes: ${{ steps.go-changes.outputs.src }}
steps:
- name: Checkout code
if: ${{ !github.event.pull_request }}
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
with:
persist-credentials: false
- name: Check code changes
uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1
id: go-changes
with:
base: ${{ github.event.pull_request.base.sha }}
ref: ${{ github.event.pull_request.head.sha }}
filters: |
src:
- .github/workflows/lint-codeql.yaml
- '**/*.go'
- 'go.mod'
- 'go.sum'
analyze:
needs: check_changes
if: ${{ needs.check_changes.outputs.go-changes == 'true' || github.event_name != 'pull_request' }}
runs-on: ubuntu-20.04
permissions:
security-events: write
steps:
- name: Checkout repo
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
with:
persist-credentials: false
fetch-depth: 1
- name: Initialize CodeQL
uses: github/codeql-action/init@ddccb873888234080b77e9bc2d4764d5ccaaccf9 # v2.21.9
with:
languages: go
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@ddccb873888234080b77e9bc2d4764d5ccaaccf9 # v2.21.9