Alexandre Teles b47297c176
Squashed commit of the following:
commit c44da582e8987d03937d9477c3c3c47646cd386b
Author: Alexandre Teles <alexandre.teles@ufba.br>
Date:   Fri Sep 30 20:53:36 2022 -0300

    fix: remove trivy until we figure it out

commit 073dd468c22d55865373f0e6bf40c86c6bdb9f1c
Author: Alexandre Teles <alexandre.teles@ufba.br>
Date:   Fri Sep 30 20:46:58 2022 -0300

    chore: remove unused files

commit 2d6ec6d5e0c5be4a603f9872c2b7e1ad303080e2
Author: Alexandre Teles <alexandre.teles@ufba.br>
Date:   Fri Sep 30 20:42:34 2022 -0300

    fix: try to fix trivy scanner

commit 2c83789cd7c780f036be35469312eee62ebe17f1
Author: Alexandre Teles <alexandre.teles@ufba.br>
Date:   Fri Sep 30 20:11:59 2022 -0300

    feat: add trivy scanner to CI

commit 181653ad68d1c22c68f7498299e09b071e108b3c
Author: Alexandre Teles <alexandre.teles@ufba.br>
Date:   Fri Sep 30 19:52:35 2022 -0300

    fix: use correct py version for workflows

commit 6625718f5ac70df6e866680f429b4d61d7b70e27
Author: Alexandre Teles <alexandre.teles@ufba.br>
Date:   Fri Sep 30 19:44:17 2022 -0300

    fix: inform py version to CodeQL

commit 8c9696bf0eb482619a23d2040c705203827e7f95
Author: Alexandre Teles <alexandre.teles@ufba.br>
Date:   Fri Sep 30 19:23:47 2022 -0300

    feature: add new workflows
2022-09-30 20:56:23 -03:00

60 lines
1.2 KiB
YAML

name: "CodeQL"
on:
push:
branches: [ "dev" ]
pull_request:
branches: [ "dev" ]
schedule:
- cron: '21 13 * * 3'
workflow_dispatch:
env:
default_branch: dev
jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
strategy:
fail-fast: false
matrix:
language: [ 'python' ]
steps:
- name: Checkout repository
uses: actions/checkout@v3
with:
ref: ${{ env.default_branch }}
- name: Set up Python
uses: actions/setup-python@v4
with:
python-version: '3.10.7'
- name: Install dependencies
run: |
python -m pip install --upgrade pip
if [ -f requirements.txt ];
then pip install -r requirements.txt;
fi
echo "CODEQL_PYTHON=$(which python)" >> $GITHUB_ENV
- name: Initialize CodeQL
uses: github/codeql-action/init@v2
with:
languages: ${{ matrix.language }}
setup-python-dependencies: false
- name: Autobuild
uses: github/codeql-action/autobuild@v2
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2
with:
category: "/language:${{matrix.language}}"