diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index dd58cab..406595f 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -19,24 +19,24 @@ jobs: uses: actions/checkout@v2 with: fetch-depth: 2 + - run: git checkout HEAD^2 if: ${{ github.event_name == 'pull_request' }} + - name: Setup Node.JS + uses: actions/setup-node@v2-beta + with: + node-version: '12' + - run: npm ci + + - name: Build codebase + run: npm run build + - name: Initialize CodeQL uses: github/codeql-action/init@v1 with: + config-file: ./.github/workflows/codeql-config.yml languages: typescript - - name: Autobuild - uses: github/codeql-action/autobuild@v1 - - # If the Autobuild fails above, remove it and uncomment the following three lines - # and modify them (or add more) to build your code if your project - # uses a compiled language - - #- run: | - # make bootstrap - # make release - - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v1 diff --git a/.github/workflows/codeql-config.yml b/.github/workflows/codeql-config.yml new file mode 100644 index 0000000..e3dae69 --- /dev/null +++ b/.github/workflows/codeql-config.yml @@ -0,0 +1,6 @@ +name: "CodeQL Config" + +queries: + - uses: security-and-quality +paths: + - dist