codeql.yml

name: codeql

on:
  schedule:
    - cron: '0 5 * * 3'
  push:
    branches:
      - master
  pull_request:

permissions:
  contents: read
  pull-requests: read
  security-events: write

jobs:
  codeql:
    runs-on: ubuntu-latest
    name: "CodeQL"
    steps:
      - name: Checkout
        uses: actions/checkout@main
      - name: Setup python
        uses: actions/setup-python@main
        with:
          python-version: '3.13'
          cache: 'pip'
      - name: Install Dependencies
        run: pip install ".[dev]"
      - name: CodeQL Initialization
        uses: github/codeql-action/init@v4
        with:
          languages: python, actions
          queries: +security-and-quality
      - name: CodeQL Analysis
        uses: github/codeql-action/analyze@v4