CodeQL JavaScript Analysis #25
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CodeQL JavaScript Analysis" | |
| on: | |
| push: | |
| branches: [ "main" ] | |
| pull_request: | |
| branches: [ "main" ] | |
| schedule: | |
| - cron: '0 3 * * 1' # Runs at 3 AM UTC every Monday | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| jobs: | |
| analyze: | |
| name: Analyze JavaScript | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v3 | |
| with: | |
| languages: javascript | |
| # Optional: For JS projects using tools like npm/yarn | |
| # queries: security-extended,security-and-quality | |
| # Note: JavaScript doesn't require explicit build steps as CodeQL can analyze it directly | |
| # If you have a custom build process for JavaScript, you can add it here | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v3 |