codeql.yml

name: 'Code scanning - action'

on:
  workflow_dispatch:
  push:
    paths:
      - '*'
      - '!/readme.md'
      - '!/SECURITY.md'
      - '!/licence.txt'
      - '!/Benchmark/*'
      - '!/IntegrationTest/*'
      - '!/dists/*'
      - '!/assets/*'
  pull_request:
    paths:
      - '*'
      - '!/readme.md'
      - '!/SECURITY.md'
      - '!/licence.txt'
      - '!/Benchmark/*'
      - '!/IntegrationTest/*'
      - '!/dists/*'
      - '!/assets/*'
  schedule:
    - cron: '0 6 * * 4'

jobs:
  analyse:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: src/BCrypt.Net
    permissions:
      actions: read
      contents: read
      security-events: write
    env:
      DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true
      DOTNET_CLI_TELEMETRY_OPTOUT: 1
    steps:
      - name: Checkout code
        uses: actions/checkout@v3
      - name: Setup .NET
        uses: actions/setup-dotnet@v2
        with:
          dotnet-version: '6.0.x'
      - name: Setup CodeQL
        uses: github/codeql-action/init@v2
        with:
          languages: csharp
      - name: Build solution
        run: dotnet build /t:rebuild /p:UseSharedCompilation=false -c Release BCrypt.Net.csproj -f net6.0
      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v2