From 153790e98c6687f8a4a9c2e1bc3a33ba5e086b39 Mon Sep 17 00:00:00 2001 From: Aleksandar Ivanov <74899441+aleks-ivanov@users.noreply.github.com> Date: Thu, 3 Jun 2021 14:05:39 +0300 Subject: [PATCH] Add CodeQL pipeline (#2) --- .github/workflows/codeql-analysis.yml | 41 +++++++++++++++++++++++++++ 1 file changed, 41 insertions(+) create mode 100644 .github/workflows/codeql-analysis.yml diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml new file mode 100644 index 00000000..64f6aa2c --- /dev/null +++ b/.github/workflows/codeql-analysis.yml @@ -0,0 +1,41 @@ +name: CodeQL Analysis + +on: + push: + pull_request: + schedule: + - cron: '0 8 * * *' + workflow_dispatch: + +jobs: + analyze: + name: Analyze + runs-on: windows-latest + steps: + - name: Add msbuild to PATH + uses: microsoft/setup-msbuild@v1.0.2 + + - name: Checkout repository + id: checkout_repo + uses: actions/checkout@v2 + + - name: Initialize CodeQL + id: init_codeql + uses: github/codeql-action/init@v1 + with: + languages: csharp + queries: security-and-quality + + - name: Build solution + id: build_solution + run: | + nuget restore .\src\Calculator.sln + msbuild .\src\Calculator.sln ` + /p:Configuration=Release ` + /p:Platform=x64 + + - name: Perform CodeQL Analysis + id: analyze_codeql + uses: github/codeql-action/analyze@v1 + +# Built with ❤ by [Pipeline Foundation](https://pipeline.foundation)