name: "CodeQL"

on:

workflow_call:

inputs:

languages:

description: "Provide a comma seperated list. Supported languages are: python, typescript, javascript, go, java, cpp, csharp, ruby."

required: false

type: string

default: "python"

mode:

description: "Supports none, autobuild or manual."

required: false

type: string

default: none

jobs:

analyze:

name: Analyze (${{inputs.languages}})

runs-on: ubuntu-latest

permissions:

# required for all workflows

security-events: write

steps:

- name: Checkout repository

uses: actions/checkout@v4

# Initializes the CodeQL tools for scanning.

- name: Initialize CodeQL

uses: github/codeql-action/init@v3

with:

queries: +security-and-quality

languages: ${{inputs.languages}}

build-mode: ${{inputs.mode }}

- name: Perform CodeQL Analysis

uses: github/codeql-action/analyze@v3