diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..b0220f7 --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,46 @@ +name: "CodeQL C# Analysis (Autobuild)" + +on: + push: + branches: + - main + - dev + pull_request: + branches: + - main + - dev + schedule: + - cron: "30 5 * * 3" + workflow_dispatch: + +permissions: + contents: read + security-events: write + packages: read + +jobs: + analyze: + name: Analyze C# with CodeQL + runs-on: windows-latest + timeout-minutes: 60 + + steps: + - name: Check out repository + uses: actions/checkout@v4 + + - name: Set up .NET SDK + uses: actions/setup-dotnet@v4 + with: + dotnet-version: "10.0.x" + + - name: Initialize CodeQL + uses: github/codeql-action/init@v3 + with: + languages: csharp + build-mode: autobuild + + - name: Autobuild + uses: github/codeql-action/autobuild@v3 + + - name: Perform CodeQL analysis + uses: github/codeql-action/analyze@v3