Create codeql.yml

[asperpharma]

Summary by CodeRabbit

• Chores
  • Added automated security code scanning via CodeQL analysis that runs on repository pushes, pull requests, and weekly schedules, supporting JavaScript/TypeScript and Python code analysis.

[gemini-code-assist]

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	abs-aws	d29fef2	Apr 03 2026, 05:52 AM

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 027ec30a-3e95-4dcf-860c-c67cfdc4e480

📥 Commits

Reviewing files that changed from the base of the PR and between 500177b and d29fef2.

📒 Files selected for processing (1)

• .github/workflows/codeql.yml

---

📝 Walkthrough

Walkthrough

A new GitHub Actions workflow file codeql.yml was added to enable automated CodeQL security analysis. The workflow runs on push and pull request events to the main branch, plus a weekly schedule, using a matrix strategy to analyze JavaScript/TypeScript, Python, and Actions code across dynamically selected runners.

Changes

Cohort / File(s)	Summary
CodeQL Workflow Configuration .github/workflows/codeql.yml	Added new GitHub Actions workflow implementing CodeQL Advanced security analysis with matrix support for three languages (actions, javascript-typescript, python), dynamic runner selection, and analysis output categorization by language.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Poem

🐰 A scanner hops through code so bright,
CodeQL guards with all its might,
Three tongues of syntax to inspect,
Security flaws we shall detect!
Matrix magic, workflows dance,
Protection's given one more chance. 🔐

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch asperpharma-patch-22

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud