fix(core): an unnamed 🏦 wallet is not a second exchange in the sweep … #55
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CodeQL" | |
| on: | |
| push: | |
| branches: ["main"] | |
| pull_request: | |
| branches: ["main"] | |
| jobs: | |
| analyze: | |
| name: Analyze | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| language: ["javascript-typescript"] | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v7 | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v4 | |
| with: | |
| languages: ${{ matrix.language }} | |
| - name: Autobuild | |
| uses: github/codeql-action/autobuild@v4 | |
| # Code scanning (the SARIF upload) is a free feature of PUBLIC repos; on this private repo it needs GHAS, which is | |
| # not purchased. The queries run either way; until the repo goes public the SARIF is kept as a run artifact. | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v4 | |
| with: | |
| upload: ${{ github.event.repository.private && 'never' || 'always' }} | |
| output: codeql-results | |
| - name: Keep the SARIF as an artifact while the repo is private | |
| if: github.event.repository.private | |
| uses: actions/upload-artifact@v7 | |
| with: | |
| name: codeql-sarif | |
| path: codeql-results | |
| retention-days: 14 |