simple updates to add codeql and run dependency-review

.devcontainer/devcontainer.json

@@ -33,7 +33,8 @@
 				"ms-azuretools.vscode-docker",
 				"github.vscode-github-actions",
 				"GitHub.copilot",
-				"GitHub.copilot-chat"
+				"GitHub.copilot-chat",
+				"GitHub.vscode-codeql"
 			]
 		}
 	}

.devcontainer/post-create.sh

@@ -1,8 +1,8 @@
 #! /bin/bash
 # stuff to do on container before using it
-sudo apt update -y
-sudo apt upgrade -y
+# sudo apt update -y
+# sudo apt upgrade -y
 # sudo apt install awscli -y
-# sudo apt install nodejs -y
-# npm install -g npm@9.1.1
+sudo apt install nodejs -y
+npm install -g npm@9.1.1
 # npm install -g aws-cdk

.github/workflows/code-ql-workflow.yml

@@ -0,0 +1,23 @@
+name: CodeQL Analysis
+
+on:
+    push:
+        branches:
+            - main
+    pull_request:
+        branches:
+            - main
+
+jobs:
+    build:
+        runs-on: ubuntu-latest
+
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@v4
+
+            - name: Initialize CodeQL
+              uses: github/codeql-action/init@v3
+
+            - name: Build and analyze
+              uses: github/codeql-action/analyze@v3

.github/workflows/dependency-review.yml

@@ -1,5 +1,13 @@
 name: 'Dependency Review Action'
-on: [pull_request]
+
+on:
+  push:
+      branches:
+          - main
+  pull_request:
+      branches:
+          - main
+
 permissions:
     contents: read
 jobs: