codeql-analysis.yml

name: "CodeQL"

on:
  push:
    branches: [master]
  pull_request:
    # The branches below must be a subset of the branches above
    branches: [master]
  schedule:
    - cron: '0 18 * * 3'

permissions: read-all

jobs:
  analyse:
    name: Analyse
    runs-on: [self-hosted, public, linux, x64]
    permissions:
      actions: read
      contents: read
      security-events: write
    steps:
      - name: Checkout repository
        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608  # v3
      - name: Initialize CodeQL
        uses: github/codeql-action/init@ddccb873888234080b77e9bc2d4764d5ccaaccf9  # v2
        with:
          languages: 'python'
      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@ddccb873888234080b77e9bc2d4764d5ccaaccf9  # v2