codeql-analysis.md

CodeQL Analysis

Runs github/codeql-action/analyze

Inputs

Input	Type	Required	Default
languages	string	false	'["actions"]'

Usage

---
name: 🔬 CodeQL Analysis

on:
  pull_request:
    branches:
      - main
  push:
    branches:
      - main

permissions: {}

jobs:
  codeql-analysis:
    name: CodeQL Analysis
    permissions:
      actions: read
      contents: read
      security-events: write
    uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-codeql-analysis.yml@<commit SHA> # <version>

Including Languages

Note

You must include actions

---
jobs:
  codeql-analysis:
    name: CodeQL Analysis
    permissions:
      actions: read
      contents: read
      security-events: write
    uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-codeql-analysis.yml@<commit SHA> # <version>
    with:
      languages: '["actions", "python"]'