codeql-update.yml

name: Weekly CodeQL Update

on:
  push:
    branches:
      - main
  schedule:
    - cron: '0 8 * * 4'

jobs:
  update:
    runs-on: ubuntu-latest

    steps:
    # Checkout the repository to the GitHub Actions runner
    - name: Checkout
      uses: actions/checkout@v2
      with:
        submodules: true

    # Update references
    - name: Git Sumbodule Update
      run: |
        git pull --recurse-submodules
        git submodule update --remote --recursive

    - name: Commit update
      run: |
        git config --global user.name 'Git bot'
        git config --global user.email 'bot@noreply.github.com'
        git remote set-url origin https://${{ secrets.COMMIT_USERNAME }}:${{ secrets.ACTIONS_SECRET }}@github.com/${{ github.repository }}
        git commit -am "Auto updated submodule references" && git push || echo "No changes to commit"