Merge pull request #1 from desktop/codeql

CodeQL
desktop · Mar 14, 2022 · 00282cb · 00282cb
2 parents 57a3ff1 + 7e69171
commit 00282cb
Showing 1 changed file with 15 additions and 19 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -11,39 +11,35 @@ on:
 jobs:
   CodeQL-Build:
     # CodeQL runs on ubuntu-latest, windows-latest, and macos-latest
-    runs-on: ubuntu-latest
+    runs-on: windows-2019
 
     permissions:
       security-events: write
 
+    strategy:
+      matrix:
+        node: [16.13.0]
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v2
 
+      - name: Use Node.js ${{ matrix.node }}
+        uses: actions/setup-node@v1
+        with:
+          node-version: ${{ matrix.node }}
+
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v1
         with:
           config-file: ./.github/codeql/codeql-config.yml
+          languages: javascript, cpp
 
-        # Override language selection by uncommenting this and choosing your languages
-        # with:
-        #   languages: go, javascript, csharp, python, cpp, java
-      # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
-      # If this step fails, then you should remove it and run the build manually (see below).
-      - name: Autobuild
-        uses: github/codeql-action/autobuild@v1
-
-      # ℹ️ Command-line programs to run using the OS shell.
-      # 📚 https://git.io/JvXDl
-
-      # ✏️ If the Autobuild fails above, remove it and uncomment the following
-      #    three lines and modify them (or add more) to build your code if your
-      #    project uses a compiled language
-
-      #- run: |
-      #     make bootstrap
-      #     make release
+      - name: Build
+        run: |
+          yarn
+          yarn build
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v1