name: "Code Scanning" on: push: branches: - main pull_request: permissions: security-events: write contents: read jobs: CodeQL-Build: runs-on: ubuntu-24.04 timeout-minutes: 20 steps: - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Initialize CodeQL uses: github/codeql-action/init@1521896cd211af95be3f02edf6f436e10b819c27 # v3.35.4 with: languages: javascript - name: Autobuild uses: github/codeql-action/autobuild@1521896cd211af95be3f02edf6f436e10b819c27 # v3.35.4 - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@1521896cd211af95be3f02edf6f436e10b819c27 # v3.35.4