feat(codeql.yml): add CodeQL workflow for continuous code analysis us…

…ing CodeQL refactor(snyk): remove .snyk policy file as it is no longer needed for vulnerability management
liquibase · Jan 16, 2024 · 57867bf · 57867bf
1 parent e5eba9d
commit 57867bf
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 9 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -0,0 +1,18 @@
+name: CodeQL
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ "main" ]
+  schedule:
+    - cron: '16 14 * * 4'
+
+jobs:
+  codeql:
+    uses: liquibase/build-logic/.github/workflows/codeql.yml@v0.6.1
+    secrets: inherit
+    with:
+      languages: '["java"]'
diff --git a/.snyk b/.snyk