👷 Merge advanced security into main flow

elgohr · Dec 6, 2023 · b614753 · b614753
1 parent 4a09c41
commit b614753
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 24 deletions.
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -15,8 +15,26 @@ jobs:
         uses: codecov/codecov-action@v3
         with:
           file: coverage.txt
+  advanced-security:
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v4
+        with:
+          go-version: '^1.21'
+      - uses: github/codeql-action/init@v2
+        with:
+          languages: 'go'
+      - uses: github/codeql-action/autobuild@v2
+      - uses: github/codeql-action/analyze@v2
   release:
-    needs: [ test ]
+    needs:
+      - test
+      - advanced-security
     runs-on: ubuntu-latest
     timeout-minutes: 5
     permissions: