name: CodeQL
on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  schedule:
    - cron: '23 4 * * 1'  # Weekly Monday 04:23 UTC
permissions:
  contents: read
jobs:
  analyze:
    uses: szl-holdings/.github/.github/workflows/reusable-codeql.yml@0c06506cba0f9d87f8bf25e37ebc1b53b3121523
    permissions:
      actions: read
      contents: read
      security-events: write
    with:
      languages: '["javascript-typescript"]'