Skip to content

Add CodeQL code scanning workflow (Python, JavaScript/TypeScript, C#, Go) #15

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Sidney Andrews (seesharprun) merged 10 commits into from
Mar 19, 2026
Merged

Add CodeQL code scanning workflow (Python, JavaScript/TypeScript, C#, Go) #15

Changes from 2 commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
5843fb9
Add CodeQL workflow for Python, C#, and Go scanning
Copilot Mar 19, 2026
ab8f6a2
Remove manual build steps from C# CodeQL job, use build-mode: none
Copilot Mar 19, 2026
3cf2239
Rename CodeQL jobs to match Validate Samples naming; add JavaScript/T…
Copilot Mar 19, 2026
bc42aee
Merge branch 'main' into copilot/enable-codeql-and-scanning
seesharprun Mar 19, 2026
c584b13
Merge branch 'main' into copilot/enable-codeql-and-scanning
seesharprun Mar 19, 2026
7e85f1f
Potential fix for pull request finding
seesharprun Mar 19, 2026
46afb3b
Potential fix for pull request finding
seesharprun Mar 19, 2026
9e7d8ff
Merge branch 'main' into copilot/enable-codeql-and-scanning
seesharprun Mar 19, 2026
4ad7abe
Move repository guard from job-level to analyze step to fix fork PR s…
Copilot Mar 19, 2026
c02273e
Merge branch 'main' into copilot/enable-codeql-and-scanning
seesharprun Mar 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
80 changes: 80 additions & 0 deletions .github/workflows/codeql.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,80 @@
name: CodeQL

on:
push:
branches: ["main"]
pull_request:
branches: ["main"]
schedule:
- cron: '30 4 * * 2'
workflow_dispatch:

Comment thread
seesharprun marked this conversation as resolved.
Resolved
jobs:
analyze-python:
name: Analyze (python)
if: github.repository == 'AzureCosmosDB/samples'
runs-on: ubuntu-latest
Comment thread
seesharprun marked this conversation as resolved.
Resolved
permissions:
security-events: write
packages: read
actions: read
contents: read
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Initialize CodeQL
Comment thread
seesharprun marked this conversation as resolved.
Resolved
uses: github/codeql-action/init@v3
with:
languages: python
build-mode: none
queries: security-and-quality
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
with:
category: "/language:python"

analyze-csharp:
name: Analyze (csharp)
if: github.repository == 'AzureCosmosDB/samples'
runs-on: ubuntu-latest
permissions:
security-events: write
packages: read
actions: read
contents: read
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
with:
languages: csharp
build-mode: none
queries: security-and-quality
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
with:
category: "/language:csharp"

analyze-go:
name: Analyze (go)
if: github.repository == 'AzureCosmosDB/samples'
runs-on: ubuntu-latest
permissions:
security-events: write
packages: read
actions: read
contents: read
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
with:
languages: go
build-mode: autobuild
queries: security-and-quality
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
with:
category: "/language:go"