Update CodeQL configuration

Signed-off-by: Sora Morimoto <[email protected]>
ocaml · Dec 22, 2024 · 6a56ec0 · 6a56ec0
1 parent c3341a1
commit 6a56ec0
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 50 deletions.
diff --git a/.github/codeql/codeql-configuration.yml b/.github/codeql/codeql-configuration.yml
@@ -1,4 +1,8 @@
+paths:
+  - .github
+  - packages
 paths-ignore:
+  - analysis
   - deploy-doc
   - dist
   - lint-doc

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -14,11 +14,17 @@ jobs:
   codeql-build:
     name: CodeQL Build
 
-    runs-on: ubuntu-latest
-
     permissions:
       security-events: write
 
+    strategy:
+      matrix:
+        language:
+          - actions
+          - typescript
+
+    runs-on: ubuntu-latest
+
     steps:
       - name: Checkout tree
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -27,9 +33,7 @@ jobs:
         uses: github/codeql-action/init@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
         with:
           config-file: .github/codeql/codeql-configuration.yml
-
-      - name: Autobuild
-        uses: github/codeql-action/autobuild@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
+          languages: ${{ matrix.language }}
 
       - name: Perform CodeQL analysis
         uses: github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml