Merge pull request #527 from open-element/dev #1759
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # CodeQL Security Analysis | |
| # | |
| # Analyzes openElement TypeScript source code for security vulnerabilities | |
| # and code quality issues using GitHub's CodeQL engine. | |
| # | |
| # For Deno/TypeScript projects, CodeQL's JS/TS extractor can analyze | |
| # source files directly without a build step. | |
| name: CodeQL | |
| on: | |
| push: | |
| branches: [main, dev] | |
| pull_request: | |
| branches: [main, dev] | |
| schedule: | |
| # Weekly scan on Sunday at 08:00 UTC | |
| - cron: '0 8 * * 0' | |
| workflow_dispatch: | |
| jobs: | |
| analyze: | |
| name: Analyze TypeScript | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| language: ['javascript-typescript'] | |
| steps: | |
| - name: Checkout repository | |
| # v7.0.0 | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | |
| - name: Initialize CodeQL | |
| # v3.28.17 | |
| uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 | |
| with: | |
| languages: ${{ matrix.language }} | |
| # Deno project -?no build step needed for TS source analysis | |
| # CodeQL JS/TS extractor works on raw source files | |
| queries: security-extended,security-and-quality | |
| - name: Perform CodeQL Analysis | |
| # v3.28.17 | |
| uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 | |
| with: | |
| category: '/language:${{matrix.language}}' |