{"path":".github/workflows/codeql.yml","size":1040,"locked":false,"binary":false,"truncated":false,"content":"name: CodeQL\n\non:\n  push:\n    branches: [main, beta]\n  pull_request:\n    branches: [main, beta]\n  schedule:\n    - cron: \"0 8 * * 3\"\n\npermissions:\n  security-events: write\n  actions: read\n  contents: read\n\njobs:\n  analyze:\n    runs-on: ubuntu-22.04\n    strategy:\n      matrix:\n        language: [javascript-typescript]\n    steps:\n      - uses: actions/checkout@v4\n\n      - uses: pnpm/action-setup@v4\n        with:\n          version: 11\n          run_install: false\n\n      - uses: actions/setup-node@v4\n        with:\n          node-version: \"22\"\n          cache: pnpm\n\n      - name: Install workspace dependencies\n        run: pnpm install --frozen-lockfile\n\n      - name: Initialize CodeQL\n        uses: github/codeql-action/init@v3\n        with:\n          languages: ${{ matrix.language }}\n          queries: security-extended\n\n      - name: Build workspace\n        run: pnpm run build\n\n      - name: Perform CodeQL analysis\n        uses: github/codeql-action/analyze@v3\n        with:\n          category: \"/language:${{ matrix.language }}\"\n"}