diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index c6f73ef..62bde7c 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -1,14 +1,14 @@ --- # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json -name: 'CodeQL' +name: "CodeQL" on: push: - branches: ['main'] + branches: ["main"] pull_request: - branches: ['main'] + branches: ["main"] schedule: - - cron: '30 1 * * 0' # Run at 1:30 AM UTC every Sunday + - cron: "30 1 * * 0" merge_group: permissions: {} @@ -20,27 +20,15 @@ jobs: permissions: actions: read contents: read + packages: read security-events: write - strategy: fail-fast: false matrix: - language: ['javascript'] # Add languages used in your actions - + language: ["actions", "javascript"] steps: - - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - - name: Initialize CodeQL - uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6 + - name: CodeQL Analysis + uses: ivuorinen/actions/codeql-analysis@97105fc2a909360678588cb50caf0be5144be486 # v2026.03.06 with: - languages: ${{ matrix.language }} + language: ${{ matrix.language }} queries: security-and-quality - - - name: Autobuild - uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6 - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6 - with: - category: '/language:${{matrix.language}}'