Skip to content

Excavator: Bump go dependency github.com/palantir/go-githubapp #1624

Excavator: Bump go dependency github.com/palantir/go-githubapp

Excavator: Bump go dependency github.com/palantir/go-githubapp #1624

name: "CodeQL"
on:
push:
branches: [ develop ]
pull_request:
branches: [ develop ]
schedule:
- cron: '16 21 * * 4'
jobs:
analyze:
permissions:
security-events: write
name: Analyze
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
language: [ 'go' ]
steps:
- name: Checkout repository
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4
with:
languages: ${{ matrix.language }}
- name: Set Go version
id: go_version
run: |
GO_VERSION=$(sed -E -n '/^go / s/^go ([0-9]+\.[0-9]+)(\.[0-9]+)?$/\1/p' < go.mod)
echo "version=${GO_VERSION}" >> $GITHUB_OUTPUT
- name: Set up Go
uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
with:
go-version: ${{ steps.go_version.outputs.version }}
- name: Autobuild for CodeQL
uses: github/codeql-action/autobuild@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4