mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-04 00:54:46 +08:00
Reed Loden
8a4ee05dbb
We're running CIFuzz and CodeQL in many cases where it doesn't make sense. We get charged for GitHub Actions minutes used, so let's make sure to only run them when absolutely necessary. For CIFuzz, only run if a *.go file has been modified. For CodeQL, only run if a path outside of docs/* and rfd/* has been modified.
49 lines
895 B
YAML
49 lines
895 B
YAML
name: "CodeQL"
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- master
|
|
- branch/*
|
|
paths-ignore:
|
|
- 'docs/**'
|
|
- 'rfd/**'
|
|
pull_request:
|
|
branches:
|
|
- master
|
|
- branch/*
|
|
paths-ignore:
|
|
- 'docs/**'
|
|
- 'rfd/**'
|
|
|
|
jobs:
|
|
analyze:
|
|
name: Analyze
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
actions: read
|
|
contents: read
|
|
security-events: write
|
|
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
language: [ 'go', 'javascript' ]
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v3
|
|
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@v2
|
|
with:
|
|
languages: ${{ matrix.language }}
|
|
|
|
- name: Autobuild
|
|
uses: github/codeql-action/autobuild@v2
|
|
|
|
- name: Perform CodeQL Analysis
|
|
uses: github/codeql-action/analyze@v2
|
|
env:
|
|
CODEQL_EXTRACTOR_GO_MAX_GOROUTINES: 16
|