Merge pull request #497 from crazy-max/codeql
Some checks failed
codeql / analyze (push) Failing after 4s
validate / prepare (push) Failing after 4s
validate / validate (push) Has been skipped
test / test (push) Successful in 1m23s
ci / main (cloud:v0.11.2-desktop.2) (push) Failing after 9s
ci / main (v0.4.1) (push) Successful in 11s
ci / main () (push) Successful in 15s
ci / main (cloud:latest) (push) Successful in 16s
ci / main (lab:latest) (push) Successful in 15s
ci / main (latest) (push) Successful in 18s
ci / multi (push) Successful in 18s
ci / error (push) Failing after 23s
ci / use (true) (push) Successful in 11s
ci / driver (image=moby/buildkit:latest) (push) Successful in 10s
ci / docker-driver (push) Successful in 7s
ci / endpoint (push) Failing after 9s
ci / use (false) (push) Successful in 23s
ci / buildkitd-config (push) Successful in 13s
ci / buildkitd-config-inline (push) Successful in 12s
ci / driver (image=moby/buildkit:master network=host ) (push) Successful in 24s
ci / with-qemu (v0.9.1, all) (push) Failing after 12s
ci / with-qemu (, all) (push) Successful in 18s
ci / with-qemu (, arm64,riscv64,arm) (push) Successful in 17s
ci / with-qemu (v0.9.1, arm64,riscv64,arm) (push) Failing after 13s
ci / build-ref (cb185f095fd3d9444e0aa605d3789e9e05f2a1e7) (push) Failing after 13s
ci / build-ref (refs/tags/v0.5.1) (push) Failing after 13s
ci / standalone-cmd (push) Successful in 15s
ci / build-ref (refs/pull/731/head) (push) Failing after 20s
ci / standalone-action (push) Successful in 16s
ci / docker-context (push) Successful in 8s
ci / platforms (push) Successful in 14s
ci / append (push) Successful in 18s
ci / cleanup (false) (push) Successful in 9s
ci / build-ref (master) (push) Successful in 32s
ci / cleanup (true) (push) Successful in 11s
ci / debug (push) Successful in 1m9s
ci / cache-binary (false) (push) Failing after 7s
ci / cache-binary (true) (push) Failing after 8s
ci / k3s (latest) (push) Failing after 16s
ci / k3s (v0.10.5) (push) Failing after 15s
ci / k3s (v0.11.0) (push) Failing after 11s
ci / keep-state-error (push) Successful in 7s
ci / keep-state (push) Successful in 10s
ci / windows-error (push) Has been cancelled

ci: enable SAST scanning with CodeQL
This commit is contained in:
CrazyMax
2026-03-20 16:57:43 +01:00
committed by GitHub

45
.github/workflows/codeql.yml vendored Normal file
View File

@@ -0,0 +1,45 @@
name: codeql
on:
push:
branches:
- 'master'
- 'releases/v*'
pull_request:
permissions:
actions: read
contents: read
security-events: write
env:
NODE_VERSION: "24"
jobs:
analyze:
runs-on: ubuntu-latest
steps:
-
name: Checkout
uses: actions/checkout@v6
-
name: Enable corepack
run: |
corepack enable
yarn --version
-
name: Set up Node
uses: actions/setup-node@v6
with:
node-version: ${{ env.NODE_VERSION }}
-
name: Initialize CodeQL
uses: github/codeql-action/init@v4
with:
languages: javascript-typescript
build-mode: none
-
name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v4
with:
category: "/language:javascript-typescript"