name: CodeQL
on:
  push:
    branches: [main, develop, 'release/**', 'hotfix/**']
  pull_request: {}
  schedule:
    - cron: '41 16 * * 0'
  workflow_dispatch: {}
permissions:
  contents: read
  actions: read
  security-events: write
  packages: read
concurrency:
  group: codeql-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
jobs:
  analyze:
    uses: QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml@c288a8864fe9054f68410e1d78f5863aea4c4d22