From 46f3fdfacdc725295c1cf02cd2c073b42da4c25a Mon Sep 17 00:00:00 2001 From: Ani Agajanyan Date: Sun, 17 Aug 2025 00:59:18 -0700 Subject: [PATCH 1/2] Add CodeQL security analysis workflow --- .github/workflows/codeql.yml | 42 ++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..45bbc50 --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,42 @@ +name: "CodeQL Security Analysis" + +on: + push: + branches: [ "master" ] + pull_request: + branches: [ "master" ] + schedule: + - cron: '46 1 * * 6' # Weekly on Saturday at 01:46 + +jobs: + analyze: + name: Analyze (${{ matrix.language }}) + runs-on: ubuntu-latest + permissions: + # required for all workflows + security-events: write + + # required to fetch internal or private CodeQL packs + packages: read + + # only required for workflows in private repositories + actions: read + contents: read + + strategy: + fail-fast: false + matrix: + include: + - language: javascript-typescript + build-mode: none + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + # Initializes the CodeQL tools for scanning. + - name: Initialize CodeQL + uses: github/codeql-action/init@v3 + with: + languages: ${{ matrix.language }} + build-mode: ${{ matrix.build-mode }} From 12cdcae48a2772033d4cb1929ac5b948b26179b5 Mon Sep 17 00:00:00 2001 From: Ani Agajanyan Date: Sun, 17 Aug 2025 22:03:22 -0700 Subject: [PATCH 2/2] Update CodeQL workflow - automated update --- .github/workflows/codeql.yml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 45bbc50..3022cf6 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -1,3 +1,4 @@ +# Updated by automated script on 2025-08-18 05:03:22 UTC name: "CodeQL Security Analysis" on: @@ -6,7 +7,7 @@ on: pull_request: branches: [ "master" ] schedule: - - cron: '46 1 * * 6' # Weekly on Saturday at 01:46 + - cron: '15 2 * * 6' # Weekly on Saturday at 02:15 jobs: analyze: @@ -40,3 +41,11 @@ jobs: with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} + + - name: Autobuild + uses: github/codeql-action/autobuild@v3 + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v3 + with: + category: "/language:${{matrix.language}}"