Something went wrong. Try again.
fork of Gleam compiler for Lua backend forked from gleam.run/gleam
Something went wrong. Try again.
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364# SPDX-License-Identifier: Apache-2.0# SPDX-FileCopyrightText: 2026 The Gleam contributors
name: "CodeQL Advanced"
on: push: branches: ["main"] pull_request: branches: ["main"] schedule: - cron: "29 8 * * 1"
permissions: contents: read
jobs: # Detects security issues in GitHub Actions workflows # See https://codeql.github.com/codeql-query-help/actions/ analyze: name: Analyze (${{ matrix.language }}) runs-on: "ubuntu-latest" permissions: security-events: write strategy: fail-fast: false matrix: include: - language: actions build-mode: none - language: javascript-typescript build-mode: none - language: rust build-mode: none steps: - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Initialize CodeQL uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: category: "/language:${{matrix.language}}"
# Detects security issues in GitHub Actions workflows # See https://docs.zizmor.sh/audits/ zizmor: name: Zizmor runs-on: ubuntu-latest permissions: security-events: write steps: - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Run zizmor uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1