From 9dc721a6a1d48f6d4b96476ceab1efa9d24e0042 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Wed, 8 Apr 2026 22:45:34 +0000 Subject: [PATCH] ci: add codeql.yml with javascript-typescript and actions scanning MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Renames codeql-analysis.yml → codeql.yml to satisfy the compliance requirement (issue #103). Updates the configuration to match org standards: - Use javascript-typescript language (required for repos with package.json) - Add actions language (required for repos with .github/workflows/*.yml) - Multi-language matrix strategy with per-language category tags - Weekly schedule aligned to org standard (Friday 17:00 UTC) Closes #103 Co-authored-by: don-petry --- .github/workflows/{codeql-analysis.yml => codeql.yml} | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) rename .github/workflows/{codeql-analysis.yml => codeql.yml} (79%) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql.yml similarity index 79% rename from .github/workflows/codeql-analysis.yml rename to .github/workflows/codeql.yml index 7da46fe6..dd7a7123 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql.yml @@ -8,11 +8,11 @@ on: pull_request: branches: [main] schedule: - - cron: '25 14 * * 1' + - cron: '0 17 * * 5' # Weekly scan (Friday 12:00 PM EST / 17:00 UTC) jobs: analyze: - name: Analyze (CodeQL) + name: Analyze (${{ matrix.language }}) runs-on: ubuntu-latest permissions: actions: read @@ -22,7 +22,7 @@ jobs: strategy: fail-fast: false matrix: - language: ['javascript'] + language: ['javascript-typescript', 'actions'] steps: - name: Checkout repository @@ -39,4 +39,4 @@ jobs: - name: Run CodeQL analysis uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4 with: - category: 'security' + category: '/language:${{ matrix.language }}'