codeql.yml

name: codeql

on:
  push:
  pull_request:
  schedule:
    - cron: '0 5 * * 3'

permissions:
  contents: read
  pull-requests: read
  security-events: write

jobs:
  codeql:
    runs-on: ubuntu-latest
    container:
      image: "registry.gitlab.com/offa/docker-images/gcc:15"
    name: "CodeQL"
    steps:
      - name: Checkout
        uses: actions/checkout@v6
      - name: Setup
        run: script/ci_setup.sh
      - name: CodeQL Initialization
        uses: github/codeql-action/init@v4
        with:
          languages: cpp, actions
          queries: +security-and-quality
          build-mode: none
          config: |
            paths-ignore:
            - 'googletest/**'
      - name: CodeQL Analysis
        uses: github/codeql-action/analyze@v4