Skip to content

Add CodeQL workflow for security scanning#45

Draft
Copilot wants to merge 2 commits intomasterfrom
copilot/configure-codeql-analysis
Draft

Add CodeQL workflow for security scanning#45
Copilot wants to merge 2 commits intomasterfrom
copilot/configure-codeql-analysis

Conversation

Copy link

Copilot AI commented Feb 14, 2026

CodeQL was not configured in the repository, leaving the codebase without automated security vulnerability scanning.

Changes

  • Added .github/workflows/codeql.yml
    • JavaScript language analysis
    • Triggers: push/PR to master and development branches, daily at 00:00 UTC
    • Uses CodeQL action v3 with autobuild
    • Permissions: actions: read, contents: read, security-events: write

This enables automatic security scanning and vulnerability detection in the Security tab.


💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Co-authored-by: jankapunkt <1135285+jankapunkt@users.noreply.github.com>
Copilot AI changed the title [WIP] Configure CodeQL analysis for repository Add CodeQL workflow for security scanning Feb 14, 2026
Copilot AI requested a review from jankapunkt February 14, 2026 12:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants