chore(deps): bump the go-deps group across 17 directories with 29 updates #970
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CodeQL | |
| on: | |
| push: | |
| branches: [master] | |
| pull_request: | |
| branches: [master, main] | |
| schedule: | |
| - cron: "23 4 * * 1" | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| permissions: | |
| security-events: write | |
| contents: read | |
| jobs: | |
| analyze: | |
| name: Analyze (${{ matrix.language }}) | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| language: [go, javascript-typescript] | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Setup Go | |
| if: matrix.language == 'go' | |
| uses: actions/setup-go@v6 | |
| with: | |
| go-version-file: .go-version | |
| env: | |
| GOTOOLCHAIN: local | |
| - name: Install build dependencies | |
| if: matrix.language == 'go' | |
| run: | | |
| curl -fsSL https://github.com/protocolbuffers/protobuf/releases/download/v35.0/protoc-35.0-linux-x86_64.zip -o /tmp/protoc.zip | |
| sudo unzip -o /tmp/protoc.zip -d /usr/local bin/protoc 'include/*' | |
| rm /tmp/protoc.zip | |
| go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.36.11 | |
| go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.6.2 | |
| go install github.com/99designs/gqlgen@v0.17.86 | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v4 | |
| with: | |
| languages: ${{ matrix.language }} | |
| - name: Build Go services | |
| if: matrix.language == 'go' | |
| run: make build | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v4 | |
| with: | |
| category: "/language:${{ matrix.language }}" |