build(deps): bump python from 57cd7c3 to 229a2c5
#795
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CodeQL | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| branches: [ main ] | |
| schedule: | |
| # Weekly Monday at 03:17 UTC. Off-hours, avoids the top-of-the-hour | |
| # rush that CodeQL gets when everyone schedules on '0 0 * * 1'. | |
| - cron: '17 3 * * 1' | |
| permissions: read-all | |
| # GitHub-hosted runners give each run an ephemeral VM, so the per-host CodeQL | |
| # state collisions that forced a serialized self-hosted group no longer apply. | |
| # Scope concurrency per ref and cancel superseded runs (standard PR CI). | |
| concurrency: | |
| group: codeql-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| analyze: | |
| name: Analyze ${{ matrix.language }} | |
| runs-on: ubuntu-latest | |
| permissions: | |
| # Required to upload results to the Security tab. | |
| security-events: write | |
| actions: read | |
| contents: read | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| language: [ python, javascript ] | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 | |
| with: | |
| languages: ${{ matrix.language }} | |
| # `security-extended` adds higher-precision queries beyond the | |
| # default suite (more coverage, slightly higher false-positive | |
| # rate — acceptable for a security-sensitive cert manager). | |
| queries: security-extended | |
| - name: Autobuild | |
| uses: github/codeql-action/autobuild@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 | |
| - name: Perform CodeQL analysis | |
| uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 | |
| with: | |
| category: "/language:${{ matrix.language }}" |