From cfac2833368281e14140c860fde762d665fb85ca Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Sun, 14 Jun 2026 02:15:07 +0100 Subject: [PATCH] fix(ci): add language: actions to codeql.yml matrix (WF020) Adds the actions extractor alongside javascript-typescript so GitHub Actions workflow YAML is scanned for CI/CD weaknesses (injection, permission issues). Fixes Hypatia WF020 codeql_missing_actions_language. Co-Authored-By: Claude Sonnet 4.6 --- .github/workflows/codeql.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index afebc49..c7996eb 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -33,6 +33,8 @@ jobs: include: - language: javascript-typescript build-mode: none + - language: actions + build-mode: none steps: - name: Checkout