github-repo-sync/.github/workflows/code-analysis.yml at master · lupaxa-gh-toolbox/github-repo-sync · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
name: Code Analysis

on:
  push:
    paths:
      - ".github/workflows/code-analysis.yml"
      - "**/*.py"
      - "pyproject.toml"
      - "setup.cfg"
      - "setup.py"
      - "requirements*.txt"
      - "poetry.lock"
      - "Pipfile"
      - "Pipfile.lock"
      - "src/**"
  pull_request:
    branches:
      - "master"
    paths:
      - ".github/workflows/code-analysis.yml"
      - "**/*.py"
      - "pyproject.toml"
      - "setup.cfg"
      - "setup.py"
      - "requirements*.txt"
      - "poetry.lock"
      - "Pipfile"
      - "Pipfile.lock"
      - "src/**"
  schedule:
    - cron: "4 3 * * 1"
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  actions: read
  contents: read
  security-events: write

jobs:
  code-analysis:
    name: Code Analysis
    uses: the-lupaxa-project/workflows/.github/workflows/reusable-code-analysis.yml@master
    with:
      languages: "python"
    secrets:
      SLACK_CODEQL_WEBHOOK_URL: ${{ secrets.SLACK_CODEQL_WEBHOOK_URL }}

  generate-workflow-summary:
    name: Generate Workflow Summary
    needs:
      - code-analysis
    if: always()
    uses: the-lupaxa-project/workflows/.github/workflows/reusable-workflow-summary.yml@master

  generate-workflow-notifications:
    name: Generate Workflow Notifications
    needs:
      - generate-workflow-summary
    if: always()
    uses: the-lupaxa-project/workflows/.github/workflows/reusable-workflow-notifier.yml@master
    with:
      notify_on_results: "failure,timed_out"
    secrets:
      slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}