Merge pull request #1193 from alphagov/add-codeql-to-ci

add codeql to ci
alphagov · Oct 12, 2023 · 114d89c · 114d89c
2 parents 8556c19 + 391a5d5
commit 114d89c
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -15,6 +15,12 @@ jobs:
     name: Security Analysis
     uses: alphagov/govuk-infrastructure/.github/workflows/brakeman.yml@main
 
+  codeql-sast:
+    name: CodeQL SAST scan
+    uses: alphagov/govuk-infrastructure/.github/workflows/codeql-analysis.yml@main
+    permissions:
+      security-events: write
+
   lint-scss:
     name: Lint SCSS
     uses: alphagov/govuk-infrastructure/.github/workflows/stylelint.yml@main
@@ -56,4 +62,3 @@ jobs:
         env:
           RAILS_ENV: test
         run: bundle exec rake spec
-