type: commit

message:
ci: add codeql analysis

Signed-off-by: Charles Moore <moorec@amazon.com>

reason: unsigned

login: moorec-aws

type: User

user_view_type: public

status: added

patch:
@@ -0,0 +1,14 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ "mainline" ]
+  pull_request:
+    branches: [ "mainline" ]
+  schedule:
+    - cron: '0 8 * * MON'
+
+jobs:
+  Analysis:
+    name: Analysis
+    uses: OpenJobDescription/.github/.github/workflows/reusable_codeql.yml@mainline


event: committed


type: pr

state: closed

title: ci: add codeql analysis

body:
### What was the problem/requirement? (What/Why)
We need code scanning on PRs

### What was the solution? (How)
Add CodeQL Code Scanning for PRs, it will also run every monday on mainline

### What is the impact of this change?
Adds Code Scanning for PRs

### How was this change tested?
CodeQL passes

### Was this change documented?
No

### Is this a breaking change?
No

----

*By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.*

ref: moorec/codeql

openjd-model-for-python

full_name: moorec-aws/openjd-model-for-python

description: Provides a Python implementation of the data model for Open Job Description's template schemas.

pull_request_creation_policy: all

visibility: public

default_branch: mainline

ref: mainline

login: OpenJobDescription

type: Organization

author_association: CONTRIBUTOR

mergeable_state: unknown


type: comment

login: github-advanced-security[bot]

type: Bot

body: This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on [this overview](/OpenJobDescription/openjd-model-for-python/security/code-scanning?query=pr%3A132+is%3Aopen). Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out [the documentation](https://docs.github.com/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning).


event: commented


Developers

slug: developers

privacy: closed

type: organization

permission: push


type: review

login: lucaseck

state: APPROVED


state: approved

event: reviewed


login: ttblanchard