From 6484dd024b8e5b4572bde7aa5dd0e1015f3793f9 Mon Sep 17 00:00:00 2001 From: Aymen Furter Date: Mon, 9 Nov 2026 17:07:06 +0100 Subject: [PATCH] ci: scan GitHub Actions with CodeQL Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 2b4ddbea-f424-4d46-9980-e126f7949804 --- .github/workflows/codeql.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 8b8e804c..3fe3ca06 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -24,6 +24,7 @@ jobs: matrix: language: - javascript-typescript + - actions steps: - name: Checkout @@ -33,8 +34,10 @@ jobs: uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 with: languages: ${{ matrix.language }} + queries: ${{ matrix.language == 'actions' && 'security-extended' || '' }} - name: Autobuild + if: matrix.language != 'actions' uses: github/codeql-action/autobuild@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 - name: Perform CodeQL Analysis