Skip to content

Merge pull request #129 from shimastripe/renovate/github-codeql-actio… #297

Merge pull request #129 from shimastripe/renovate/github-codeql-actio…

Merge pull request #129 from shimastripe/renovate/github-codeql-actio… #297

name: "CodeQL"
on:
workflow_dispatch:
push:
schedule:
- cron: '25 0 * * 0'
concurrency:
group: codeql-${{ github.ref }}
cancel-in-progress: true
jobs:
analyze:
name: Analyze
runs-on: macos-14
env:
DEVELOPER_DIR: "/Applications/Xcode_16.0.app/Contents/Developer"
timeout-minutes: 120
permissions:
security-events: write
steps:
- name: Set up build options
run: |
defaults write com.apple.dt.Xcode IDESkipMacroFingerprintValidation -bool YES
defaults write com.apple.dt.Xcode IDESkipPackagePluginFingerprintValidatation -bool YES
- name: Checkout repository
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
- name: Configure SPM cache
uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4
with:
path: ~/Library/Caches/org.swift.swiftpm
key: spm-${{ hashFiles('Package.swift') }}
restore-keys: |
spm-
- name: Initialize CodeQL
uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd # v3
with:
languages: swift
- name: Autobuild
uses: github/codeql-action/autobuild@662472033e021d55d94146f66f6058822b0b39fd # v3
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd # v3
with:
category: "/language:swift"