Skip to content

chore: update to sig.k8s.io/karpenter v0.36.0 (#260) #278

chore: update to sig.k8s.io/karpenter v0.36.0 (#260)

chore: update to sig.k8s.io/karpenter v0.36.0 (#260) #278

name: "CodeQL"
on:
push:
branches: [main]
schedule:
- cron: '0 12 * * *'
permissions:
contents: read
jobs:
analyze:
if: github.repository == 'Azure/karpenter-provider-azure'
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
strategy:
fail-fast: false
matrix:
language: [ 'go' ]
steps:
- name: Harden Runner
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
with:
egress-policy: audit
- uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
- uses: ./.github/actions/install-deps
- run: make vulncheck
- uses: github/codeql-action/init@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
with:
languages: ${{ matrix.language }}
- uses: github/codeql-action/autobuild@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
- uses: github/codeql-action/analyze@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10