github-codeql.yaml

# https://github.com/Skenvy/Collatz/security/code-scanning
# https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning
name: GitHub 🐱‍👤 CodeQL 🛡👨‍💻🛡
on:
  workflow_call:
    inputs:
      # https://aka.ms/codeql-docs/language-support
      # # TODO csharp
      language:
        description: 'The language to run CodeQL on'
        required: true
        type: string
permissions:
  actions: read
  contents: read
  security-events: write
jobs:
  analyze:
    name: Analyze
    runs-on: ubuntu-latest
    steps:
    - name: 🏁 Checkout
      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
    - name: 🛡👨‍💻🛡 Init CodeQL
      uses: github/codeql-action/init@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
      with:
        languages: ${{ inputs.language }}
        queries: +security-extended,security-and-quality
    - name: 🛠 Autobuild
      uses: github/codeql-action/autobuild@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
    - name: 🛡👨‍💻🛡 Perform CodeQL Analysis
      uses: github/codeql-action/analyze@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
      with:
        category: "/language:${{ inputs.language }}"