Uses GREENBONE_BOT_TOKEN instead of GITHUB_TOKEN #1204
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CodeQL" | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| branches: [ main ] | |
| schedule: | |
| - cron: '30 5 * * 0' # 5:30h on Sundays | |
| jobs: | |
| analyze: | |
| name: Analyze | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| container: greenbone/gvm-libs:edge | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: install dependencies | |
| run: | | |
| sh .github/install-openvas-dependencies.sh | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v3 | |
| with: | |
| languages: 'c' | |
| # build between init and analyze ... | |
| - name: Configure and Compile openvas-scanner | |
| run: | | |
| mkdir build && cd build/ && cmake \ | |
| -DCMAKE_BUILD_TYPE=Release .. && make install | |
| working-directory: ${{ github.WORKSPACE }} | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v3 |