Skip to content

Commit 2ceb87b

Browse files
authored
Modify CodeQL workflow and update action versions
Updated CodeQL analysis workflow to exclude dependabot branches and upgraded actions versions.
1 parent c06f7f7 commit 2ceb87b

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

.github/workflows/codeql-analysis.yml

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,11 +4,9 @@ on:
44
push:
55
branches:
66
- main
7-
- "!dependabot/**"
87
pull_request:
98
branches:
109
- main
11-
- "!dependabot/**"
1210

1311
permissions:
1412
contents: read
@@ -24,14 +22,15 @@ jobs:
2422

2523
steps:
2624
- name: Checkout repository
27-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
25+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2826
with:
2927
persist-credentials: false
3028

3129
- name: Initialize CodeQL
3230
uses: github/codeql-action/init@2152c31696c8409983789c80ab57c4d91465a2fc # v4
3331
with:
3432
languages: "javascript"
33+
queries: +security-and-quality
3534

3635
- name: Perform CodeQL Analysis
3736
uses: github/codeql-action/analyze@2152c31696c8409983789c80ab57c4d91465a2fc # v4

0 commit comments

Comments
 (0)