@@ -3,62 +3,62 @@ name: "Code scanning - action"
33on :
44 push :
55 branches-ignore :
6- - ' dependabot/**'
6+ - " dependabot/**"
77 pull_request :
88 schedule :
9- - cron : ' 0 10 * * 5'
9+ - cron : " 0 10 * * 5"
1010
1111jobs :
1212 CodeQL-Build :
13-
1413 runs-on : ubuntu-latest
1514
1615 permissions :
1716 security-events : write
1817
1918 steps :
20- - name : Checkout repository
21- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
22- with :
23- # We must fetch at least the immediate parents so that if this is
24- # a pull request then we can checkout the head.
25- fetch-depth : 2
26- persist-credentials : false
19+ - name : Checkout repository
20+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
21+ with :
22+ # We must fetch at least the immediate parents so that if this is
23+ # a pull request then we can checkout the head.
24+ fetch-depth : 2
25+ persist-credentials : false
2726
28- # If this run was triggered by a pull request event, then checkout
29- # the head of the pull request instead of the merge commit.
30- - run : git checkout HEAD^2
31- if : ${{ github.event_name == 'pull_request' }}
27+ # If this run was triggered by a pull request event, then checkout
28+ # the head of the pull request instead of the merge commit.
29+ - run : git checkout HEAD^2
30+ if : ${{ github.event_name == 'pull_request' }}
3231
33- - name : Setup .NET
34- uses : actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
35- with :
36- dotnet-version : |
37- 8.0.x
38- 9.0.x
32+ - name : Setup .NET
33+ uses : actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
34+ with :
35+ dotnet-version : |
36+ 8.0.x
37+ 9.0.x
38+ 10.0.x
3939
40- # Initializes the CodeQL tools for scanning.
41- - name : Initialize CodeQL
42- uses : github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
43- # Override language selection by uncommenting this and choosing your languages
44- # with:
45- # languages: go, javascript, csharp, python, cpp, java
40+ # Initializes the CodeQL tools for scanning.
41+ - name : Initialize CodeQL
42+ uses : github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
43+ # Override language selection by uncommenting this and choosing your languages
44+ # with:
45+ # languages: go, javascript, csharp, python, cpp, java
4646
47- # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
48- # If this step fails, then you should remove it and run the build manually (see below)
49- - name : Autobuild
50- uses : github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
47+ # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
48+ # If this step fails, then you should remove it and run the build manually (see below)
49+ - name : Autobuild
50+ uses : github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
5151
52- # ℹ️ Command-line programs to run using the OS shell.
53- # 📚 https://git.io/JvXDl
52+ # ℹ️ Command-line programs to run using the OS shell.
53+ # 📚 https://git.io/JvXDl
5454
55- # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
56- # and modify them (or add more) to build your code if your project
57- # uses a compiled language
55+ # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
56+ # and modify them (or add more) to build your code if your project
57+ # uses a compiled language
5858
59- # - run: |
60- # make bootstrap
61- # make release
59+ # - run: |
60+ # make bootstrap
61+ # make release
6262
63- - name : Perform CodeQL Analysis
64- uses : github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
63+ - name : Perform CodeQL Analysis
64+ uses : github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
0 commit comments