code scanning

Author: IT SEC BOT

.github/workflows/codeql-analysis.yml

@@ -3,18 +3,35 @@
 #
 # You may wish to alter this file to override the set of languages analyzed,
 # or to provide custom queries or build logic.
-name: "CodeQL"
+name: "IT Security Code Scan"
 
 on:
+  push:
+    # The branches below must be a subset of the branches above
+    branches: [master]
+    paths-ignore:
+      - '**/*.md'
+      - '**/*.txt'
+      - '**/*.yml'
+      - '**/*.yaml'
   pull_request:
     # The branches below must be a subset of the branches above
     branches: [master]
+    paths-ignore:
+      - '**/*.md'
+      - '**/*.txt'
+      - '**/*.yml'
+      - '**/*.yaml'
   workflow_dispatch:
 
 jobs:
   analyze:
     name: Analyze
-    runs-on: [self-hosted, linux, x64, aws-runner-1]
+    runs-on: [runnerset=code-scanning-runners]
+    env: 
+      CODEQL_RAM: 8192
+      CODEQL_THREADS: 2
+      GOPRIVATE: github.com/tokopedia/*
 
     strategy:
       fail-fast: false
@@ -28,10 +45,26 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v2
+    - run: git config --global --add url."git@github.com:".insteadOf "https://github.com/"
+    - name: Set Up Go
+      if: matrix.language == 'go'
+      uses: actions/setup-go@v2
+      with:
+        go-version: 1.14
+    - name: Set Up Node
+      if: matrix.language == 'javascript'
+      uses: actions/setup-node@v3
+      with:
+        node-version: '14'
 
+    - name: Set Up Python
+      if: matrix.language == 'python'
+      uses: actions/setup-python@v4
+      with:
+        python-version: '3.x'
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@v2
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -42,7 +75,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
+      uses: github/codeql-action/autobuild@v2
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -56,4 +89,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@v2