codeql #6

	name: codeql

	# Default to 'contents: read', which grants actions to read commits.
	#
	# If any permission is set, any permission not included in the list is
	# implicitly set to "none".
	#
	# see https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
	permissions:
	contents: read

	on:
	push:
	branches:
	- 'master'
	tags:
	- 'v*'
	pull_request:
	# The branches below must be a subset of the branches above
	branches: ["master"]
	schedule:
	# ┌───────────── minute (0 - 59)
	# │ ┌───────────── hour (0 - 23)
	# │ │ ┌───────────── day of the month (1 - 31)
	# │ │ │ ┌───────────── month (1 - 12)
	# │ │ │ │ ┌───────────── day of the week (0 - 6) (Sunday to Saturday)
	# │ │ │ │ │
	# │ │ │ │ │
	# │ │ │ │ │
	# * * * * *
	- cron: '0 9 * * 4'

	jobs:
	codeql:
	runs-on: ubuntu-24.04
	timeout-minutes: 10
	permissions:
	actions: read
	contents: read
	security-events: write

	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-go@v5
	with:
	go-version: "stable"
	- name: Create go.mod
	run: \|
	ln -s vendor.mod go.mod
	ln -s vendor.sum go.sum
	- name: Initialize CodeQL
	uses: github/codeql-action/init@v3
	with:
	languages: go
	- name: Autobuild
	uses: github/codeql-action/autobuild@v3
	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v3
	with:
	category: "/language:go"

Provide feedback