From 1b36254208d113f3dae1f80613b977bd7a97af2b Mon Sep 17 00:00:00 2001 From: Paul Mulligan Date: Sun, 12 Apr 2026 20:02:17 -0400 Subject: [PATCH] feat: add CodeQL security scanning workflow Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/workflows/codeql.yml | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..28c313b --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,25 @@ +name: CodeQL + +on: + push: + branches: [main] + pull_request: + branches: [main] + schedule: + - cron: '0 6 * * 1' # Weekly Monday 6am UTC + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-latest + timeout-minutes: 10 + permissions: + security-events: write + steps: + - uses: actions/checkout@v4 + + - uses: github/codeql-action/init@v3 + with: + languages: javascript-typescript + + - uses: github/codeql-action/analyze@v3