Configure CodeQL code scanning

arthurdejong · arthurdejong · commit e2a95fcf7a18 · 2021-07-18T15:07:35.000+02:00
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -49,3 +49,20 @@ jobs:
         run: python -m pip install --upgrade pip tox
       - name: Tox
         run: tox -e flake8 --skip-missing-interpreters false
+  CodeQL:
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: python
+    - name: Build
+      uses: github/codeql-action/autobuild@v1
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1
