Conversation
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| permissions: | ||
| contents: read | ||
| security-events: write |
There was a problem hiding this comment.
Grant actions: read permission for CodeQL job
The job scopes the GITHUB_TOKEN to only contents: read and security-events: write. CodeQL’s init@v3 step calls the Actions API to download the CodeQL bundle; with actions permission removed this call fails with “Resource not accessible by integration”, so the workflow never reaches the analysis step on any trigger. Add actions: read alongside the other permissions to keep the token minimal while allowing the job to execute.
Useful? React with 👍 / 👎.
…itch README screenshots to 1.3.3 set; refresh #2; note in CHANGELOG
* release: v1.3.0 unified Classic+/Enhanced; 43–47 support; docs + build script (#47) * Release: v1.3.1 (polish) (#48) * release: v1.3.0 unified Classic+/Enhanced; 43–47 support; docs + build script * chore: add Classic filter/toggle shortcuts to prefs (ESM), grouping polish; prepare 1.3.1 * Docs: branch layout + EGO packaging (#49) * release: v1.3.0 unified Classic+/Enhanced; 43–47 support; docs + build script * Docs: document branch layout and EGO packaging * ci: add ESLint workflow; enable manual dispatch for EGO Validate (#52) * build(deps): bump actions/setup-node from 4 to 6 (#55) * build(deps): bump actions/setup-node from 4 to 6 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v6) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * ci: re-trigger checks --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Nick Otmazgin <nickotmazgin.dev@gmail.com> * Release 1.3.3 (GNOME 45–47): Simplified UI + stability + new toggles (#57) * feat(ui): simplify row actions, remove duplicate header; fix stalls during screenshots; add 43–44 build scripts; bump to 1.3.2 (version 26) * chore(release): update CHANGELOG and EGO notes for 1.3.2 * feat: add hide-pinned/starred toggles; default capture-primary off; restore donations; release script * docs: add What’s New in 1.3.3 to README * build(deps): bump actions/checkout from 5 to 6 (#56) Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * UI: improve bottom spacing for pagination/actions (#59) * feat(ui): simplify row actions, remove duplicate header; fix stalls during screenshots; add 43–44 build scripts; bump to 1.3.2 (version 26) * chore(release): update CHANGELOG and EGO notes for 1.3.2 * feat: add hide-pinned/starred toggles; default capture-primary off; restore donations; release script * docs: add What’s New in 1.3.3 to README * ui: improve bottom spacing for pagination/actions; keep layout readable on small menus * UI: bottom actions -> Menu popup (no version bump) (#61) * ui: bottom actions -> single Menu button with popup actions; keep empty-state access * copy: rename bottom button label to ‘Actions’ * docs: note ‘Actions’ button refinement; empty-state hint; keeps 1.3.3 * Docs: add screenshots (1.3.3) + collage (#62) * ui: bottom actions -> single Menu button with popup actions; keep empty-state access * copy: rename bottom button label to ‘Actions’ * docs: note ‘Actions’ button refinement; empty-state hint; keeps 1.3.3 * docs(screenshots): add 1.3.3 collage and 1–9 images; update README section * docs(screenshots): switch README to 1.3.3 and drop legacy images (#63) * Docs: consolidate screenshots to single 1.3.3 section (#64) * docs(screenshots): switch README to 1.3.3 and drop legacy images * docs: consolidate screenshots to single 1.3.3 section (remove duplicate block) * Docs: use absolute collage URL (main) (#65) * docs(screenshots): switch README to 1.3.3 and drop legacy images * docs: use absolute URL for collage to avoid caching/path issues * Docs: collage first + 3×3 grid for screenshots (#66) * docs(screenshots): switch README to 1.3.3 and drop legacy images * docs: replace legacy gallery with 1.3.3 collage + 3×3 grid * docs: adjust grid width to 300px and improve alt text * ci: auto-merge docs PRs + nightly prune merged branches (#68) * ci(guard): block non-docs changes into main unless labeled code-ok (#70) * docs: 1.3.3 screenshots – gradient collage + refreshed #2; README/CHANGELOG updates (#71) * docs(screenshots): update 1.3.3 collage with blue→purple gradient; switch README screenshots to 1.3.3 set; refresh #2; note in CHANGELOG * docs(screenshots): update 1.3.3/2.png (new quick menu) * docs: align compatibility + add 1.3.3 to CHANGELOG * infra: add CODEOWNERS to auto-request reviews on code paths (non-blocking) (#74) * ci: run checks on main+gnome43-44 PRs; remove lint path filters * infra: enable Sponsor button via FUNDING.yml * infra: enable Sponsor button via FUNDING.yml (GitHub + PayPal) * docs: add GitHub Sponsors badge (keep PayPal); sponsor badge in header * docs: update screenshots (1.3.4) + new collage; Actions toggles; IO folder prefs; packaging script; tidy * docs: remove temporary processed tiles from screenshots * chore: bump 43–44 metadata version-name, update changelog, tune stylesheet widths --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: ClipFlow Bot <bot@example.com>
Summary
Testing
Note
Adds a GitHub Actions CodeQL scanning workflow for JavaScript with push/PR triggers and a weekly schedule.
.github/workflows/codeql.yml.push/pull_requesttomainand weekly cron.javascriptusinggithub/codeql-action(init,autobuild,analyze).contents: read,security-events: write) and usesubuntu-latest.Written by Cursor Bugbot for commit 84fe2ec. This will update automatically on new commits. Configure here.