fix(deps): update all npm dependencies (major) #1642
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CodeQL Analysis" | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| branches: [ main ] | |
| schedule: | |
| - cron: '35 23 * * 1' | |
| jobs: | |
| analyze: | |
| name: CodeQL Security Scan | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 20 | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| language: [ 'java' ] | |
| steps: | |
| - name: 📥 Checkout Repository | |
| uses: actions/checkout@v6 | |
| - name: ☕ Set up JDK 17 | |
| uses: actions/setup-java@v5 | |
| with: | |
| distribution: 'temurin' | |
| java-version: 17 | |
| - name: 🧰 Initialize CodeQL | |
| uses: github/codeql-action/init@v3 | |
| with: | |
| languages: ${{ matrix.language }} | |
| # Optional custom queries: | |
| # queries: +./.github/codeql/custom-queries | |
| - name: ⚙️ Build Project (Autobuild) | |
| uses: github/codeql-action/autobuild@v3 | |
| # Uncomment below if manual build is required: | |
| # - name: 🛠️ Manual Build | |
| # run: | | |
| # ./gradlew clean build | |
| - name: 🧪 Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v3 | |
| - name: 📝 Summary of CodeQL Analysis | |
| if: failure() | |
| run: | | |
| echo "### ❌ CodeQL scan failed for ${{ matrix.language }}" >> "$GITHUB_STEP_SUMMARY" | |
| echo "" >> "$GITHUB_STEP_SUMMARY" | |
| echo "**Commit:** ${{ github.sha }}" >> "$GITHUB_STEP_SUMMARY" | |
| echo "**Triggered by:** ${{ github.actor }}" >> "$GITHUB_STEP_SUMMARY" | |
| echo "**Workflow:** [View Run](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})" >> "$GITHUB_STEP_SUMMARY" |