| name: "CodeQL Security Analysis" | |
| on: | |
| push: | |
| branches: [ main, master ] | |
| pull_request: | |
| # The branches below must be a subset of the branches above | |
| branches: [ main, master ] | |
| schedule: | |
| - cron: '30 4 * * 1' # Runs every Monday at 4:30 AM UTC | |
| jobs: | |
| analyze: | |
| name: Analyze | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| language: [ 'javascript-typescript' ] | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v7 | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v4 | |
| with: | |
| languages: ${{ matrix.language }} | |
| queries: security-extended,security-and-quality | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v4 | |