codeql-analysis.yml

# Scan the code for security vulnerabilities with CodeQL.
# See: https://github.com/github/codeql-action

name: "CodeQL"

on:
  push:
    branches:
      - "main"
      - "develop"
  pull_request:
    # The branches below must be a subset of the branches above.
    branches:
      - "main"
      - "develop"

jobs:
  scan:
    runs-on: "ubuntu-latest"
    permissions:
      security-events: "write"
    steps:
      - name: "Checkout repository"
        uses: "actions/checkout@v4"
      - name: "Initialize CodeQL"
        uses: "github/codeql-action/init@v3"
        with:
          languages: "python"
          # Override the default behavior so that the action doesn't
          # attempt to auto-install Python dependencies. See:
          # https://docs.github.com/en/code-security/secure-coding/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#analyzing-python-dependencies
          setup-python-dependencies: false
      - name: "Perform CodeQL Analysis"
        uses: "github/codeql-action/analyze@v3"