---

name: "CodeQL"

on:

push:

branches: [main]

pull_request:

# The branches below must be a subset of the branches above

branches: [main]

schedule:

- cron: '20 11 * * 1'

jobs:

analyze:

name: Analyze

runs-on: ubuntu-latest

permissions:

actions: read

contents: read

security-events: write

strategy:

fail-fast: false

matrix:

language: ['python']

steps:

- name: Checkout repository

uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

with:

persist-credentials: false

- name: Initialize CodeQL

uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2

with:

languages: ${{ matrix.language }}

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2