codeql-pull-request.yml

name: CodeQL (PR)
on:
  pull_request:
    branches:
      - main
  workflow_dispatch: null
jobs:
  analyze:
    name: Analyze
    runs-on: ${{ matrix.runner }}
    permissions:
      actions: read
      contents: read
      security-events: write
    strategy:
      fail-fast: false
      matrix:
        language:
          - go
          - javascript
        runner:
          - macos-latest-xlarge
          - ubuntu-8-cores-latest
          - windows-8-cores-latest
        config-file:
          - .github/codeql-config.yml
          - ''
    steps:
      - name: Checkout Code
        uses: actions/checkout@v3
      - name: Run Code Scanning
        uses: ./codeql-analysis
        with:
          language: ${{ matrix.language }}
          config-file: ${{ matrix.config-file }}

  analyze-rhel:
    name: Analyze RHEL
    runs-on: rhel-7
    permissions:
      actions: read
      contents: read
      security-events: write
    steps:
      - name: Checkout Code
        uses: actions/checkout@v3
      - name: Run Code Scanning
        uses: ./codeql-analysis
        with:
          language: javascript