Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
9eeb533
Merge pull request #5 from beer-sakthai/claude/branch-commit-merge-ma…
beer-sakthai Sep 23, 2026
c8f0270
Use standard macOS runners instead of larger (xlarge) runners
claude Sep 23, 2026
26a58bc
Only upload CodeQL self-analysis results from the upstream repository
claude Sep 23, 2026
84f4a46
Merge pull request #6 from beer-sakthai/claude/branch-commit-merge-ma…
beer-sakthai Sep 23, 2026
d5bb663
Bump brace-expansion
dependabot[bot] Oct 7, 2026
224dc51
Merge pull request #7 from beer-sakthai/dependabot/npm_and_yarn/npm_a…
beer-sakthai Oct 7, 2026
299edd7
Merge branch 'main' into main
beer-sakthai Nov 11, 2026
4afab37
Enhance security policy with detailed guidelines
beer-sakthai Nov 12, 2026
0d3f9cf
Update OS matrix in CodeQL workflow
beer-sakthai Nov 12, 2026
10cfcbb
Bump the npm-minor group across 1 directory with 8 updates
dependabot[bot] Nov 12, 2026
b78df19
Bump ava from 6.4.1 to 8.3.0
dependabot[bot] Nov 12, 2026
a8a8f94
Bump @actions/http-client from 3.0.2 to 4.0.1
dependabot[bot] Nov 12, 2026
0535b0e
Merge pull request #8 from beer-sakthai/dependabot/npm_and_yarn/npm-m…
beer-sakthai Nov 12, 2026
1af68df
Merge branch 'main' into dependabot/npm_and_yarn/ava-8.3.0
beer-sakthai Nov 12, 2026
bad77bc
Merge pull request #9 from beer-sakthai/dependabot/npm_and_yarn/ava-8…
beer-sakthai Nov 12, 2026
752bc5f
Merge branch 'main' into dependabot/npm_and_yarn/actions/http-client-…
beer-sakthai Nov 12, 2026
524612e
Merge pull request #10 from beer-sakthai/dependabot/npm_and_yarn/acti…
beer-sakthai Nov 12, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .github/workflows/__all-platform-bundle.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

18 changes: 14 additions & 4 deletions .github/workflows/__multi-language-autodetect.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 2 additions & 0 deletions .github/workflows/__per-language-bundle-validation.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

1 change: 1 addition & 0 deletions .github/workflows/__swift-autobuild.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

5 changes: 5 additions & 0 deletions .github/workflows/__swift-custom-build.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

38 changes: 38 additions & 0 deletions .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -88,6 +88,26 @@ jobs:
security-events: write

steps:
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Initialize CodeQL
uses: ./init
id: init
with:
languages: javascript
config-file: ./.github/codeql/codeql-config-javascript.yml
tools: ${{ matrix.tools }}
# confirm steps.init.outputs.codeql-path points to the codeql binary
- name: Print CodeQL Version
run: >
"$CODEQL" version --format=json
env:
CODEQL: ${{steps.init.outputs.codeql-path}}
- name: Perform CodeQL Analysis
uses: ./analyze
with:
category: "/language:javascript"
upload: ${{ (github.repository == 'github/codeql-action' && matrix.os == 'ubuntu-24.04' && !matrix.tools && github.event_name != 'merge_group' && 'always' ) || 'never' }}
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Initialize CodeQL
Expand Down Expand Up @@ -124,6 +144,24 @@ jobs:
security-events: write

steps:
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Initialize CodeQL
uses: ./init
with:
languages: ${{ matrix.language }}
build-mode: none
config: >
paths-ignore:
- lib
- tests
queries:
- uses: security-and-quality
- name: Perform CodeQL Analysis
uses: ./analyze
with:
category: "/language:${{ matrix.language }}"
upload: ${{ (github.repository == 'github/codeql-action' && github.event_name != 'merge_group' && 'always') || 'never' }}
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Initialize CodeQL
Expand Down
Loading