otpauth/.github/workflows/codeql.yml

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: "CodeQL"

on:
  push:
    tags: ["*"]
    branches: ["*"]
  pull_request:
    branches: ["*"]
  schedule:
    - cron: "25 10 * * 3"
  workflow_dispatch:

concurrency:
  group: "${{ github.workflow }}-${{ github.ref }}"
  cancel-in-progress: true

permissions: {}

jobs:
  analyze:
    name: "Analyze (${{ matrix.language }})"
    runs-on: "ubuntu-latest"
    permissions:
      actions: "read"
      contents: "read"
      security-events: "write"
    strategy:
      fail-fast: false
      matrix:
        include:
          - { language: "actions", build-mode: "none" }
          - { language: "javascript-typescript", build-mode: "none" }
    steps:
      - name: "Checkout"
        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"
      - name: "Initialize CodeQL"
        uses: "github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225"
        with:
          languages: "${{ matrix.language }}"
          build-mode: "${{ matrix.build-mode }}"
      - name: "Perform CodeQL Analysis"
        uses: "github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225"
        with:
          category: "/language:${{matrix.language}}"