From 7fb4408ce7419569eb16e7d6a0e7ceb7560ad9b3 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Mon, 31 Aug 2026 21:19:40 +0000 Subject: [PATCH 1/2] Initial plan From c5218d4ab2abf0811b3c54cf9341ef83eb638521 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Mon, 31 Aug 2026 21:22:58 +0000 Subject: [PATCH 2/2] Add explicit CodeQL workflow configuration Co-authored-by: brunolins16 <12376385+brunolins16@users.noreply.github.com> --- .github/codeql-config.yml | 4 ++++ .github/workflows/codeql.yml | 38 ++++++++++++++++++++++++++++++++++++ 2 files changed, 42 insertions(+) create mode 100644 .github/codeql-config.yml create mode 100644 .github/workflows/codeql.yml diff --git a/.github/codeql-config.yml b/.github/codeql-config.yml new file mode 100644 index 0000000..d421928 --- /dev/null +++ b/.github/codeql-config.yml @@ -0,0 +1,4 @@ +name: 'CodeQL configuration' + +paths-ignore: + - dist/** diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..d53caca --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,38 @@ +name: CodeQL + +on: + pull_request: + branches: + - main + push: + branches: + - main + +permissions: + contents: read + security-events: write + +jobs: + analyze: + name: Analyze (${{ matrix.language }}) + runs-on: ubuntu-latest + strategy: + fail-fast: false + matrix: + language: + - actions + - javascript-typescript + + steps: + - name: Checkout + uses: actions/checkout@v7 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v4 + with: + config-file: ./.github/codeql-config.yml + languages: ${{ matrix.language }} + build-mode: none + + - name: Analyze + uses: github/codeql-action/analyze@v4