codeql.yml

name: CodeQL

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  schedule:
    - cron: "26 14 * * 2"

jobs:
  analyze:
    name: Analyze
    # Code scanning uploads need GitHub Advanced Security, which private
    # repos (deploy-button copies are private by recommendation) usually
    # lack; skip rather than fail there.
    if: ${{ !github.event.repository.private }}
    runs-on: ubuntu-latest
    permissions:
      security-events: write
      contents: read
      actions: read
    steps:
      - uses: actions/checkout@v7
      - uses: github/codeql-action/init@v4
        with:
          languages: javascript-typescript
      - uses: github/codeql-action/analyze@v4
        with:
          category: "/language:javascript-typescript"