ci: add CodeQL security scanning

Signed-off-by: Sora Morimoto <sora@morimoto.io>
nodejs · Mar 18, 2021 · 9fa4710 · 9fa4710
1 parent 1a385ec
commit 9fa4710
Showing 1 changed file with 21 additions and 0 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -0,0 +1,21 @@
+name: CodeQL
+
+on:
+  pull_request:
+  push:
+  schedule:
+    - cron: 0 0 * * 0
+
+jobs:
+  codeql:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v1
+
+      - name: Perform CodeQL analysis
+        uses: github/codeql-action/analyze@v1