name: Code Scanning

on:
  push:
    branches:
      - main
    paths:
      - '**.go'
      - go.mod
      - go.sum
  pull_request:
    branches:
      - main
    paths:
      - '**.go'
      - go.mod
      - go.sum
  schedule:
    - cron: "0 0 * * 0"
  workflow_dispatch:

jobs:
  CodeQL-Build:
    runs-on: ubuntu-latest
    if: ${{ !contains(github.event.pull_request.labels.*.name, 'skip-ci') }}
    steps:
      - name: Check out code
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1

      - name: setup go
        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
        with:
          go-version-file: "go.mod"
          cache: true

      - name: Initialize CodeQL
        uses: github/codeql-action/init@66b90a5db151a8042fa97405c6cf843bbe433f7b # v2.22.7
        with:
          languages: go

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@66b90a5db151a8042fa97405c6cf843bbe433f7b # v2.22.7