Skip to content

Add CodeQL analysis workflow#2

Merged
nickotmazgin merged 1 commit intomainfrom
codeql-analysis
Nov 5, 2025
Merged

Add CodeQL analysis workflow#2
nickotmazgin merged 1 commit intomainfrom
codeql-analysis

Conversation

@nickotmazgin
Copy link
Copy Markdown
Owner

@nickotmazgin nickotmazgin commented Nov 5, 2025

Summary

  • add GitHub CodeQL scanning for JavaScript sources
  • schedule weekly runs plus push/PR triggers

Testing

  • none (workflow-only change)

Note

Adds a GitHub Actions CodeQL scanning workflow for JavaScript with push/PR triggers and a weekly schedule.

  • CI / GitHub Actions:
    • Add CodeQL analysis workflow in .github/workflows/codeql.yml.
      • Triggers on push/pull_request to main and weekly cron.
      • Analyzes javascript using github/codeql-action (init, autobuild, analyze).
      • Sets minimal permissions (contents: read, security-events: write) and uses ubuntu-latest.

Written by Cursor Bugbot for commit 84fe2ec. This will update automatically on new commits. Configure here.

@nickotmazgin nickotmazgin merged commit 978a99b into main Nov 5, 2025
2 checks passed
@nickotmazgin nickotmazgin deleted the codeql-analysis branch November 5, 2025 15:59
@github-advanced-security
Copy link
Copy Markdown

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment on lines +15 to +17
permissions:
contents: read
security-events: write
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Grant actions: read permission for CodeQL job

The job scopes the GITHUB_TOKEN to only contents: read and security-events: write. CodeQL’s init@v3 step calls the Actions API to download the CodeQL bundle; with actions permission removed this call fails with “Resource not accessible by integration”, so the workflow never reaches the analysis step on any trigger. Add actions: read alongside the other permissions to keep the token minimal while allowing the job to execute.

Useful? React with 👍 / 👎.

nickotmazgin added a commit that referenced this pull request Nov 30, 2025
…itch README screenshots to 1.3.3 set; refresh #2; note in CHANGELOG
nickotmazgin added a commit that referenced this pull request Nov 30, 2025
…NGELOG updates (#71)

* docs(screenshots): update 1.3.3 collage with blue→purple gradient; switch README screenshots to 1.3.3 set; refresh #2; note in CHANGELOG

* docs(screenshots): update 1.3.3/2.png (new quick menu)
nickotmazgin added a commit that referenced this pull request Dec 6, 2025
* release: v1.3.0 unified Classic+/Enhanced; 43–47 support; docs + build script (#47)

* Release: v1.3.1 (polish) (#48)

* release: v1.3.0 unified Classic+/Enhanced; 43–47 support; docs + build script

* chore: add Classic filter/toggle shortcuts to prefs (ESM), grouping polish; prepare 1.3.1

* Docs: branch layout + EGO packaging (#49)

* release: v1.3.0 unified Classic+/Enhanced; 43–47 support; docs + build script

* Docs: document branch layout and EGO packaging

* ci: add ESLint workflow; enable manual dispatch for EGO Validate (#52)

* build(deps): bump actions/setup-node from 4 to 6 (#55)

* build(deps): bump actions/setup-node from 4 to 6

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* ci: re-trigger checks

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nick Otmazgin <nickotmazgin.dev@gmail.com>

* Release 1.3.3 (GNOME 45–47): Simplified UI + stability + new toggles (#57)

* feat(ui): simplify row actions, remove duplicate header; fix stalls during screenshots; add 43–44 build scripts; bump to 1.3.2 (version 26)

* chore(release): update CHANGELOG and EGO notes for 1.3.2

* feat: add hide-pinned/starred toggles; default capture-primary off; restore donations; release script

* docs: add What’s New in 1.3.3 to README

* build(deps): bump actions/checkout from 5 to 6 (#56)

Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* UI: improve bottom spacing for pagination/actions (#59)

* feat(ui): simplify row actions, remove duplicate header; fix stalls during screenshots; add 43–44 build scripts; bump to 1.3.2 (version 26)

* chore(release): update CHANGELOG and EGO notes for 1.3.2

* feat: add hide-pinned/starred toggles; default capture-primary off; restore donations; release script

* docs: add What’s New in 1.3.3 to README

* ui: improve bottom spacing for pagination/actions; keep layout readable on small menus

* UI: bottom actions -> Menu popup (no version bump) (#61)

* ui: bottom actions -> single Menu button with popup actions; keep empty-state access

* copy: rename bottom button label to ‘Actions’

* docs: note ‘Actions’ button refinement; empty-state hint; keeps 1.3.3

* Docs: add screenshots (1.3.3) + collage (#62)

* ui: bottom actions -> single Menu button with popup actions; keep empty-state access

* copy: rename bottom button label to ‘Actions’

* docs: note ‘Actions’ button refinement; empty-state hint; keeps 1.3.3

* docs(screenshots): add 1.3.3 collage and 1–9 images; update README section

* docs(screenshots): switch README to 1.3.3 and drop legacy images (#63)

* Docs: consolidate screenshots to single 1.3.3 section (#64)

* docs(screenshots): switch README to 1.3.3 and drop legacy images

* docs: consolidate screenshots to single 1.3.3 section (remove duplicate block)

* Docs: use absolute collage URL (main) (#65)

* docs(screenshots): switch README to 1.3.3 and drop legacy images

* docs: use absolute URL for collage to avoid caching/path issues

* Docs: collage first + 3×3 grid for screenshots (#66)

* docs(screenshots): switch README to 1.3.3 and drop legacy images

* docs: replace legacy gallery with 1.3.3 collage + 3×3 grid

* docs: adjust grid width to 300px and improve alt text

* ci: auto-merge docs PRs + nightly prune merged branches (#68)

* ci(guard): block non-docs changes into main unless labeled code-ok (#70)

* docs: 1.3.3 screenshots – gradient collage + refreshed #2; README/CHANGELOG updates (#71)

* docs(screenshots): update 1.3.3 collage with blue→purple gradient; switch README screenshots to 1.3.3 set; refresh #2; note in CHANGELOG

* docs(screenshots): update 1.3.3/2.png (new quick menu)

* docs: align compatibility + add 1.3.3 to CHANGELOG

* infra: add CODEOWNERS to auto-request reviews on code paths (non-blocking) (#74)

* ci: run checks on main+gnome43-44 PRs; remove lint path filters

* infra: enable Sponsor button via FUNDING.yml

* infra: enable Sponsor button via FUNDING.yml (GitHub + PayPal)

* docs: add GitHub Sponsors badge (keep PayPal); sponsor badge in header

* docs: update screenshots (1.3.4) + new collage; Actions toggles; IO folder prefs; packaging script; tidy

* docs: remove temporary processed tiles from screenshots

* chore: bump 43–44 metadata version-name, update changelog, tune stylesheet widths

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ClipFlow Bot <bot@example.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants