chore(ci): move CodeQL to advanced mode via dedicated workflow#1286
Conversation
|
|
✅ Deploy Preview for trusting-lumiere-9c7fad ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #1286 +/- ##
=========================================
Coverage 100.00% 100.00%
=========================================
Files 174 174
Lines 1622 1622
Branches 392 392
=========================================
Hits 1622 1622 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
commit: |
There was a problem hiding this comment.
Pull request overview
Adds a dedicated “CodeQL Advanced” GitHub Actions workflow to ensure CodeQL static analysis runs on every push to main (and also on PRs), aligning with OpenSSF Scorecard expectations.
Changes:
- Introduces a new CodeQL Advanced workflow triggered on
pushtomainandpull_request. - Runs CodeQL analysis via a language matrix (
actions,javascript-typescript) using thesecurity-and-qualityquery suite.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
🎉 This PR is included in version 2.33.7 🎉 The release is available on: Your semantic-release bot 📦🚀 |
This is required by the openssf scorecard to validate that static analysis (CodeQL) is run on every commit pushed to main, whereas the default CodeQL config might chose to skip running it.