Skip to content

Merge pull request #609 from wultra/issues/dependabot-gha #647

Merge pull request #609 from wultra/issues/dependabot-gha

Merge pull request #609 from wultra/issues/dependabot-gha #647

name: "CodeQL"
on:
workflow_dispatch:
push:
branches: [ 'develop', 'master', 'releases/**' ]
schedule:
- cron: '0 2 * * 4'
jobs:
codeql-analysis:

Check failure on line 11 in .github/workflows/codeql-analysis.yml

View workflow run for this annotation

GitHub Actions / CodeQL

Invalid workflow file

The workflow is not valid. .github/workflows/codeql-analysis.yml (Line: 11, Col: 3): Error calling workflow 'wultra/wultra-infrastructure/.github/workflows/codeql-analysis.yml@develop'. The nested job 'analyze' is requesting 'actions: read, security-events: write', but is only allowed 'actions: none, security-events: none'.
uses: wultra/wultra-infrastructure/.github/workflows/codeql-analysis.yml@develop
secrets: inherit
with:
languages: "['java']"
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
# Use only 'java' to analyze code written in Java, Kotlin or both
# Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
java_version: 21