codeql.yml

# # For most projects, this workflow file will not need changing; you simply need
# # to commit it to your repository.
# #
# # You may wish to alter this file to override the set of languages analyzed,
# # or to provide custom queries or build logic.
# #
# # ******** NOTE ********
# # We have attempted to detect the languages in your repository. Please check
# # the `language` matrix defined below to confirm you have the correct set of
# # supported CodeQL languages.
# #
# name: "codeql"

# TEMPORARILY REMOVE UNTIL GO 1.21 IS SUPPORTED.

# on:
#   push:
#     branches: ["main"]
#   pull_request:
#     # The branches below must be a subset of the branches above
#     branches: ["main"]
#   schedule:
#     - cron: "16 8 * * 6"

# jobs:
#   analyze:
#     runs-on: "ubuntu-latest"
#     permissions:
#       actions: read
#       contents: read
#       security-events: write

#     strategy:
#       fail-fast: false
#       matrix:
#         language: ["go"]
#         versions: [1.21.6]
#         # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
#         # Use only 'java' to analyze code written in Java, Kotlin or both
#         # Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
#         # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support

#     steps:
#       - name: Checkout repository
#         uses: actions/checkout@v3

#       # Initializes the CodeQL tools for scanning.
#       - name: Initialize CodeQL
#         uses: github/codeql-action/init@v2
#         with:
#           languages: ${{ matrix.language }}
#           # If you wish to specify custom queries, you can do so here or in a config file.
#           # By default, queries listed here will override any specified in a config file.
#           # Prefix the list here with "+" to use these queries and those in the config file.

#           # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
#           # queries: security-extended,security-and-quality

#       # # Autobuild attempts to build any compiled languages  (C/C++, C#, Go, or Java).
#       # # If this step fails, then you should remove it and run the build manually (see below)
#       # - name: Autobuild
#       #   uses: github/codeql-action/autobuild@v2

#       - name: Install Foundry
#         uses: foundry-rs/foundry-toolchain@v1
#       - name: Setup Golang
#         uses: actions/setup-go@v3
#         with:
#           go-version: ${{ matrix.versions }}
#       - name: Cache Golang Deps
#         uses: actions/cache@v3
#         with:
#           path: |
#             ~/.cache/go-build
#             ~/go/pkg/mod
#             ~/go/bin
#           # We use a different restore key for the codeql version just in case the autobuilder decides
#           # to compile with a different go version or do anything funky.
#           key: ${{ runner.os }}-golang-codeql-${{ hashFiles('**/go.sum') }}
#           restore-keys: |
#             ${{ runner.os }}-golang-codeql-

#       - name: Perform CodeQL Analysis
#         uses: github/codeql-action/analyze@v2
#         with:
#           category: "/language:${{matrix.language}}"