Run CodeQL on every commit to main (#4794)

Practically, we were scanning enough previously (at least once a day, plus any commit that changed source files), but this will help check the box in CII Best Practices.
This commit is contained in:
Zach Wasserman 2022-04-11 11:53:08 -07:00 committed by GitHub
parent eddc2e2bda
commit 7cb71bc5a8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -13,13 +13,8 @@ on:
- '**.jsx'
- '**.ts'
- '**.tsx'
schedule:
- cron: '18 17 * * 1'
workflow_dispatch: # Manual
permissions:
contents: read
jobs:
analyze:
name: Analyze