Add CodeQL workflow for Python

bittor7x0 · Feb 11, 2024 · a2d3106 · a2d3106
1 parent f51593b
commit a2d3106
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/.github/workflows/code-scan.yml b/.github/workflows/code-scan.yml
@@ -95,3 +95,22 @@ jobs:
             -Dsonar.organization=bittor7x0
             -Dsonar.projectKey=bittor7x0_kodi-script-autoruns
             -Dsonar.python.version=3.7,3.8,3.9,3.10
+
+  codeql-scan:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Repo
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: python
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:python"