Skip to content

Commit c14bc2d

Browse files
authored
Refactor CodeQL workflow for improved syntax and updates
Updated CodeQL workflow to use new syntax and versions.
1 parent cd788ec commit c14bc2d

1 file changed

Lines changed: 30 additions & 26 deletions

File tree

.github/workflows/codeql.yml

Lines changed: 30 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -2,45 +2,49 @@ name: CodeQL
22

33
on:
44
push:
5-
branches: [ "main" ]
5+
branches:
6+
- main
67
pull_request:
7-
branches: [ "main" ]
8+
branches:
9+
- main
810
schedule:
9-
- cron: '0 3 * * 1'
11+
- cron: "0 3 * * 1"
1012

1113
jobs:
1214
analyze:
13-
name: Analyze
15+
name: Analyze (CodeQL)
1416
runs-on: ubuntu-latest
1517

1618
permissions:
19+
actions: read
1720
contents: read
1821
security-events: write
1922

2023
strategy:
2124
fail-fast: false
2225
matrix:
23-
language: [ 'javascript' ]
26+
language:
27+
- javascript-typescript
2428

2529
steps:
26-
- name: Checkout repository
27-
uses: actions/checkout@v4
28-
29-
- name: Setup Node
30-
uses: actions/setup-node@v4
31-
with:
32-
node-version: 18
33-
cache: npm
34-
35-
- name: Install dependencies
36-
run: npm install
37-
# or: yarn install
38-
39-
- name: Initialize CodeQL
40-
uses: github/codeql-action/init@v3
41-
with:
42-
languages: ${{ matrix.language }}
43-
44-
45-
- name: Perform CodeQL Analysis
46-
uses: github/codeql-action/analyze@v3
30+
- name: Checkout repository
31+
uses: actions/checkout@v4
32+
33+
- name: Setup Node.js
34+
uses: actions/setup-node@v4
35+
with:
36+
node-version: "20"
37+
cache: "npm"
38+
39+
- name: Install dependencies
40+
run: npm ci
41+
42+
- name: Initialize CodeQL
43+
uses: github/codeql-action/init@v4
44+
with:
45+
languages: ${{ matrix.language }}
46+
config-file: ./.github/codeql/codeql-config.yml
47+
queries: security-extended
48+
49+
- name: Perform CodeQL Analysis
50+
uses: github/codeql-action/analyze@v4

0 commit comments

Comments
 (0)