From beb73ae6980ddbca44cf6761adea5eddb595929c Mon Sep 17 00:00:00 2001 From: Jason O'Neal Date: Sun, 30 Aug 2026 20:44:18 -0400 Subject: [PATCH 1/2] Add CodeQL analysis --- .github/workflows/codeql.yml | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..f026d69 --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,33 @@ +name: CodeQL + +on: + push: + branches: [main] + pull_request: + branches: [main] + schedule: + - cron: "41 7 * * 3" + +permissions: + contents: read + security-events: write + +jobs: + analyze: + name: CodeQL (javascript-typescript) + runs-on: ubuntu-latest + timeout-minutes: 30 + + steps: + - name: Check out repository + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + + - name: Initialize CodeQL + uses: github/codeql-action/init@6f5948dfacef28e207b48d0905cf90c03365536d # v3 + with: + languages: javascript-typescript + + - name: Analyze + uses: github/codeql-action/analyze@6f5948dfacef28e207b48d0905cf90c03365536d # v3 + with: + category: "/language:javascript-typescript" From 329e4a1b4daec9b86e693b8f037152a96dce61be Mon Sep 17 00:00:00 2001 From: Jason O'Neal Date: Sun, 30 Aug 2026 20:51:30 -0400 Subject: [PATCH 2/2] Use CodeQL v4 --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index f026d69..d7bdb62 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -23,11 +23,11 @@ jobs: uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - name: Initialize CodeQL - uses: github/codeql-action/init@6f5948dfacef28e207b48d0905cf90c03365536d # v3 + uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4 with: languages: javascript-typescript - name: Analyze - uses: github/codeql-action/analyze@6f5948dfacef28e207b48d0905cf90c03365536d # v3 + uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4 with: category: "/language:javascript-typescript"