summaryrefslogtreecommitdiff
path: root/.github
diff options
context:
space:
mode:
authorGuy Korland <gkorland@gmail.com>2021-04-26 12:55:54 +0300
committerGitHub <noreply@github.com>2021-04-26 12:55:54 +0300
commitd1ca1e665f5df75fee6d7e9034b06a9686b7b239 (patch)
treecff9963a7e26a7a76bf39db8e8245e82c2a73541 /.github
parent20735a5354a76dfef97fb4ddeb1999b2ea74d8f3 (diff)
downloadredis-d1ca1e665f5df75fee6d7e9034b06a9686b7b239.tar.gz
Add codeql static analysis in PR CI (#8854)
Diffstat (limited to '.github')
-rw-r--r--.github/workflows/codeql-analysis.yml33
1 files changed, 33 insertions, 0 deletions
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
new file mode 100644
index 000000000..a940b794d
--- /dev/null
+++ b/.github/workflows/codeql-analysis.yml
@@ -0,0 +1,33 @@
+name: "CodeQL"
+
+on:
+ push:
+ pull_request:
+ schedule:
+ # run weekly new vulnerability was added to the the database
+ - cron: '0 0 * * 0'
+
+jobs:
+ analyze:
+ name: Analyze
+ runs-on: ubuntu-latest
+
+ strategy:
+ fail-fast: false
+ matrix:
+ language: [ 'cpp' ]
+
+ steps:
+ - name: Checkout repository
+ uses: actions/checkout@v2
+
+ - name: Initialize CodeQL
+ uses: github/codeql-action/init@v1
+ with:
+ languages: ${{ matrix.language }}
+
+ - name: Autobuild
+ uses: github/codeql-action/autobuild@v1
+
+ - name: Perform CodeQL Analysis
+ uses: github/codeql-action/analyze@v1