ci: improve workflow determinism and security scanning

- Add --language=shellspec flag to tree-sitter parse for deterministic grammar selection
- Add C++ language to CodeQL analysis to scan src/scanner.c for security issues

Addresses PR #1 review comments from CodeRabbit.
This commit is contained in:
2025-11-25 23:28:03 +02:00
parent dc672f8485
commit 9208f7ff8c
2 changed files with 2 additions and 2 deletions

View File

@@ -24,7 +24,7 @@ jobs:
strategy: strategy:
fail-fast: false fail-fast: false
matrix: matrix:
language: ['actions,javascript'] # Add languages used in your actions language: ['actions,javascript', 'cpp'] # Add languages used in your actions
steps: steps:
- name: Checkout repository - name: Checkout repository

View File

@@ -140,7 +140,7 @@ jobs:
End End
EOF EOF
npx tree-sitter parse test_sample.shellspec --quiet || { npx tree-sitter parse --language=shellspec test_sample.shellspec --quiet || {
echo "❌ Parser failed on sample ShellSpec code" echo "❌ Parser failed on sample ShellSpec code"
exit 1 exit 1
} }