summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--.github/workflows/codeql.yml30
-rw-r--r--changelogs/fragments/T9082-codeql-workflow.yml2
2 files changed, 32 insertions, 0 deletions
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
new file mode 100644
index 00000000..b83b94e0
--- /dev/null
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,30 @@
+name: "Perform CodeQL Analysis"
+
+on:
+ push:
+ branches:
+ - main
+ paths:
+ - '**'
+ - '!.github/**'
+ - '!**/*.md'
+ pull_request:
+ branches:
+ - main
+ paths:
+ - '**'
+ - '!.github/**'
+ - '!**/*.md'
+ schedule:
+ - cron: '52 13 * * 0'
+
+permissions:
+ actions: read
+ contents: read
+ security-events: write
+
+jobs:
+ codeql-analysis-call:
+ uses: vyos/.github/.github/workflows/codeql-analysis.yml@production
+ with:
+ languages: "['python']"
diff --git a/changelogs/fragments/T9082-codeql-workflow.yml b/changelogs/fragments/T9082-codeql-workflow.yml
new file mode 100644
index 00000000..5d09acd7
--- /dev/null
+++ b/changelogs/fragments/T9082-codeql-workflow.yml
@@ -0,0 +1,2 @@
+trivial:
+ - Add CodeQL analysis workflow calling the VyOS org-wide central reusable (T9082).