actions/docker-metadata-action
12
0
Fork 0
mirror of https://github.com/docker/metadata-action.git synced 2026-05-06 10:14:25 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge pull request #622 from crazy-max/codeql
Some checks failed
ci / context (git) (push) Has been cancelled
Details
ci / context (workflow) (push) Has been cancelled
Details
ci / multi-images (push) Has been cancelled
Details
ci / tag-schedule () (push) Has been cancelled
Details
ci / tag-schedule (cron-{{date 'YYYYMMDD'}}) (push) Has been cancelled
Details
ci / tag-schedule (schedule) (push) Has been cancelled
Details
ci / tag-schedule ({{date 'YYYYMMDD-HHmmss'}}) (push) Has been cancelled
Details
ci / tag-match (\d.\d, 0) (push) Has been cancelled
Details
ci / tag-match (\d.\d.\d, 0) (push) Has been cancelled
Details
ci / tag-match (v(.*), 1) (push) Has been cancelled
Details
ci / tag-semver (auto) (push) Has been cancelled
Details
ci / tag-semver (false) (push) Has been cancelled
Details
ci / tag-semver (true) (push) Has been cancelled
Details
ci / flavor (push) Has been cancelled
Details
ci / images (push) Has been cancelled
Details
ci / custom-labels-annotations (push) Has been cancelled
Details
ci / global-exps (push) Has been cancelled
Details
ci / json (push) Has been cancelled
Details
ci / docker-push (push) Has been cancelled
Details
ci / bake (push) Has been cancelled
Details
ci / sep-tags ( ) (push) Has been cancelled
Details
ci / sep-tags (,) (push) Has been cancelled
Details
ci / output-env (push) Has been cancelled
Details
ci / no-output-env (push) Has been cancelled
Details
ci / bake-annotations (push) Has been cancelled
Details
ci / no-images (push) Has been cancelled
Details
ci / bake-path-context (push) Has been cancelled
Details
ci / sha-short () (push) Has been cancelled
Details
ci / sha-short (16) (push) Has been cancelled
Details
ci / dump (push) Has been cancelled
Details
codeql / analyze (push) Has been cancelled
Details
test / test (push) Has been cancelled
Details
validate / prepare (push) Has been cancelled
Details
validate / validate (push) Has been cancelled
Details

Browse source 
ci: enable SAST scanning with CodeQL
This commit is contained in:
CrazyMax 2026-03-20 16:57:23 +01:00 • committed by GitHub
commit 1107934206
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 45 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

45
.github/workflows/codeql.yml vendored Normal file
View file

@ -0,0 +1,45 @@
name: codeql
on:
push:
branches:
- 'master'
- 'releases/v*'
pull_request:
permissions:
actions: read
contents: read
security-events: write
env:
NODE_VERSION: "24"
jobs:
analyze:
runs-on: ubuntu-latest
steps:
-
name: Checkout
uses: actions/checkout@v6
-
name: Enable corepack
run: |
corepack enable
yarn --version
-
name: Set up Node
uses: actions/setup-node@v6
with:
node-version: ${{ env.NODE_VERSION }}
-
name: Initialize CodeQL
uses: github/codeql-action/init@v4
with:
languages: javascript-typescript
build-mode: none
-
name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v4
with:
category: "/language:javascript-typescript"