mirror of
https://github.com/NicolasBohn/NexQuant.git
synced 2026-07-27 23:47:46 +00:00
TPTBusiness
bc717ffe84
- ci.yml: lint + bandit (PyCQA/bandit-action) + pytest test/backtesting/ - release.yml: switch from manual tag-based to release-please auto-changelog - codeql.yml: new weekly + on-push CodeQL Python analysis Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
32 lines
581 B
YAML
32 lines
581 B
YAML
name: CodeQL
|
|
|
|
on:
|
|
push:
|
|
branches: [master, main]
|
|
pull_request:
|
|
branches: [master, main]
|
|
schedule:
|
|
- cron: "0 6 * * 1" # Every Monday at 06:00 UTC
|
|
|
|
permissions:
|
|
contents: read
|
|
security-events: write
|
|
actions: read
|
|
|
|
jobs:
|
|
analyze:
|
|
name: Analyze (Python)
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: github/codeql-action/init@v3
|
|
with:
|
|
languages: python
|
|
queries: security-and-quality
|
|
|
|
- uses: github/codeql-action/analyze@v3
|
|
with:
|
|
category: "/language:python"
|