fmt/.github/workflows/codeql.yml
dependabot[bot] a03dc3c6eb
Bump github/codeql-action/analyze from 4.36.1 to 4.38.2 (#4965)
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.36.1 to 4.38.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](87557b9c84...2892aa5e19)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-01 08:47:42 -07:00

34 lines
726 B
YAML

name: codeql
on:
push:
branches: [main]
pull_request:
branches: [main]
permissions:
contents: read
jobs:
analyze:
runs-on: ubuntu-latest
permissions:
contents: read
security-events: write
actions: read
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v3.29.5
with:
languages: c-cpp
- name: Build
run: |
cmake -B build -DFMT_DOC=OFF -DFMT_TEST=OFF
cmake --build build --parallel
- uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v3.29.5
with:
category: /language:c-cpp