docs: refresh latest versions in README (auto) (#31) #68
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CodeQL | |
| # GitHub-native security analysis. Runs on push to main, on PRs that touch | |
| # scanned source, and weekly to catch advisories published after merge. | |
| # | |
| # Languages covered: JavaScript/TypeScript (scripts/, mcp/, cli/, site/). | |
| # We do not scan vendored third-party assets under site/vendor/. | |
| # | |
| # Suppression policy: NONE. All findings are fixed, not suppressed. | |
| # Tea leaf from upstream PR reviews: bigger projects gate on CodeQL clean, | |
| # and we want our own house in order before pitching integrations. | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| merge_group: | |
| schedule: | |
| - cron: "23 5 * * 1" | |
| permissions: | |
| contents: read | |
| jobs: | |
| analyze: | |
| name: Analyze (${{ matrix.language }}) | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| permissions: | |
| security-events: write | |
| packages: read | |
| actions: read | |
| contents: read | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| language: ["javascript-typescript"] | |
| steps: | |
| # pin: v6.0.0 -- actions/checkout | |
| - name: Checkout | |
| uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 | |
| # pin: v4.35.4 -- github/codeql-action | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e | |
| with: | |
| languages: ${{ matrix.language }} | |
| queries: security-and-quality | |
| config: | | |
| paths-ignore: | |
| - site/vendor/** | |
| - "**/node_modules/**" | |
| - "**/dist/**" | |
| # pin: v4.35.4 -- github/codeql-action | |
| - name: Perform CodeQL analysis | |
| uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e | |
| with: | |
| category: "/language:${{ matrix.language }}" |