build(deps): bump uvicorn from 0.52.0 to 0.52.1 #218
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CodeQL | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| branches: [ main ] | |
| schedule: | |
| # Pazartesi 07:00 UTC (Red Team Scan'den 1h sonra, conflict yok) | |
| - cron: '0 7 * * 1' | |
| permissions: | |
| contents: read | |
| security-events: write | |
| actions: read | |
| concurrency: | |
| group: codeql-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| analyze: | |
| name: Analyze (${{ matrix.language }}) | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 30 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| # 'c-cpp' covers the security-critical scanner (curl/SSRF/redirect code). | |
| language: [ 'python', 'c-cpp' ] | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v7 | |
| - name: Install C build deps | |
| if: matrix.language == 'c-cpp' | |
| run: sudo apt-get update && sudo apt-get install -y libcurl4-openssl-dev libssl-dev libcjson-dev | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v4 | |
| with: | |
| languages: ${{ matrix.language }} | |
| # security-and-quality = security-extended + maintainability queries | |
| # Test path exclusions live in the config file. | |
| config-file: ./.github/codeql/codeql-config.yml | |
| - name: Build C scanner (c-cpp only — CodeQL traces this compile) | |
| if: matrix.language == 'c-cpp' | |
| run: cd scanner && make | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v4 | |
| with: | |
| category: "/language:${{ matrix.language }}" |