Bump spring-io/spring-github-workflows/.github/workflows/spring-merge-dependabot-pr.yml from 222b96e81b66393d17f899db7e5fb3c101707518 to ca5c08f71900990e297d53afae8ff973254a70da #3407
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CodeQL Advanced" | |
| on: | |
| push: | |
| pull_request: | |
| workflow_dispatch: | |
| schedule: | |
| # https://docs.github.com/en/actions/writing-workflows/choosing-when-your-workflow-runs/events-that-trigger-workflows#schedule | |
| - cron: '0 5 * * *' | |
| permissions: read-all | |
| jobs: | |
| codeql-analysis-call: | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| uses: spring-io/github-actions/.github/workflows/codeql-analysis.yml@1 |