ci(scorecard): keep a failing API call from taking the workflow down #113

	# CodeQL — thin caller of the org-wide reusable analysis (bymaxone/.github).
	#
	# The whole definition, including the public-repository gate that decides
	# whether scanning may run at all, lives in bymaxone/.github so the licensing
	# rule exists once rather than in every repository that copies it.
	name: CodeQL

	on:
	push:
	branches: [main]
	pull_request:
	schedule:
	- cron: '17 3 * * 1'

	jobs:
	# Job id is the convention across the org: it prefixes the reported check,
	# so every repo shows `codeql / Analyze (<language>)` under the same name.
	codeql:
	# Declared on the calling job, which is the only place that reaches the
	# called workflow: a job that sets its own permissions replaces the
	# workflow-level set rather than intersecting with it, and a called
	# workflow cannot be granted more than its caller holds.
	permissions:
	contents: read
	security-events: write
	actions: read
	uses: bymaxone/.github/.github/workflows/codeql.yml@v1

Navigation Menu