chore(i18n): call the release list "releases", keep "version" for the… #15
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CodeQL | |
| # Advanced CodeQL setup (replaces GitHub's default code-scanning setup). | |
| # We run the advanced workflow so that .github/codeql/codeql-config.yml's | |
| # `paths-ignore` is actually honoured — the default setup does not reliably | |
| # apply it, which left test/tooling code (Math.random in test ids, canned | |
| # URL checks, local QA scripts) flagged. The default setup must be disabled | |
| # in repo Settings → Code security for this workflow to run. | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| schedule: | |
| - cron: "30 1 * * 1" # weekly, Monday 01:30 UTC | |
| permissions: | |
| contents: read | |
| jobs: | |
| analyze: | |
| name: Analyze (${{ matrix.language }}) | |
| runs-on: ubuntu-latest | |
| # Code scanning needs GitHub Advanced Security, which a private repository | |
| # on a free plan does not have. The analysis itself completes; the upload | |
| # step is what fails, so the job burns several minutes to end red without | |
| # having told anyone anything. Skipping says the same thing honestly. | |
| # | |
| # Written as a condition rather than a removed trigger so scanning returns | |
| # by itself when the repository goes public. semgrep and gitleaks cover the | |
| # interval — neither depends on Advanced Security. | |
| if: github.event.repository.visibility == 'public' | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| # Mirrors the languages the default setup detected | |
| # (javascript + typescript are analysed together). | |
| language: [javascript-typescript, python, actions] | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v3 | |
| with: | |
| languages: ${{ matrix.language }} | |
| build-mode: none | |
| config-file: ./.github/codeql/codeql-config.yml | |
| - name: Perform CodeQL analysis | |
| uses: github/codeql-action/analyze@v3 | |
| with: | |
| category: "/language:${{ matrix.language }}" |