This is an automated email from the ASF dual-hosted git repository. erisu pushed a commit to branch chore/update-actions-dependabot in repository https://gitbox.apache.org/repos/asf/cordova-coho.git
commit bb1e53a293d77f5f8e6b9fe06378d64a3c2c406e Author: Erisu <[email protected]> AuthorDate: Tue Aug 25 20:59:30 2026 +0900 chore(workflow): add codeql job --- .github/workflows/ci.yml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5145c30..ef7ec9f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -26,6 +26,34 @@ on: - '*' jobs: + codeql: + name: CodeQL Analysis + + runs-on: ubuntu-latest + + permissions: + contents: read + security-events: write + + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false + fetch-depth: 1 + + - uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + with: + languages: javascript + queries: security-and-quality + config: | + paths-ignore: + - .nyc_output + - apache-rat-0.12 + - coverage + - node_modules + + - uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + test: name: NodeJS ${{ matrix.node-version }} on ${{ matrix.os }} --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
