Perform nightly CodeQL code scan #16

	# Summary: configuration for CodeQL.

	name: Nightly CodeQL code scan
	run-name: Perform nightly CodeQL code scan

	on:
	schedule:
	- cron: '37 13 * * 5'

	# Allow manual invocation.
	workflow_dispatch:

	# Declare default permissions as read only.
	permissions: read-all

	# Cancel any previously-started but still active runs on the same branch.
	concurrency:
	cancel-in-progress: true
	group: ${{github.workflow}}-${{github.event.pull_request.number\|\|github.ref}}

	jobs:
	codeql:
	name: Run CodeQL analysis
	runs-on: ubuntu-24.04
	permissions:
	security-events: write
	packages: read
	steps:
	- name: Check out a copy of the git repository
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Initialize CodeQL
	uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3
	with:
	languages: Python

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3
	with:
	category: "/language:Python"

Provide feedback