codeql.yml

name: CodeQL

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  schedule:
    - cron: "23 5 * * 1"

permissions:
  contents: read

jobs:
  analyze:
    name: Analyze (csharp)
    runs-on: ubuntu-latest
    permissions:
      security-events: write
      actions: read
      contents: read

    steps:
      - uses: actions/checkout@v5

      - name: Set up .NET
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: |
            8.0.x
            10.0.x

      - name: Initialize CodeQL
        uses: github/codeql-action/init@v4
        with:
          languages: csharp
          # This is an authentication library; ask for the wider query set.
          queries: security-extended

      # Autobuild guesses, and guesses badly on a multi-targeted library that needs two SDKs.
      # Build it explicitly instead.
      - name: Build
        run: dotnet build DapperIdentity.sln -c Release

      - name: Analyze
        uses: github/codeql-action/analyze@v4
        with:
          category: "/language:csharp"