| name: CodeQL Security Analysis For Github Actions | |
| on: | |
| push: | |
| branches: ["main"] | |
| workflow_dispatch: | |
| # pull_request: | |
| jobs: | |
| codeql: | |
| name: CodeQL Analysis | |
| uses: huggingface/security-workflows/.github/workflows/codeql-reusable.yml@v1 | |
| permissions: | |
| security-events: write | |
| packages: read | |
| actions: read | |
| contents: read | |
| with: | |
| languages: '["actions","python"]' | |
| queries: 'security-extended,security-and-quality' | |
| runner: 'ubuntu-latest' #optional if need custom runner | |