Compare commits

..

4 Commits

Author SHA1 Message Date
Tõnis Tiigi
172dff065f Merge pull request #502 from crazy-max/update-crazy-max-action
ci: bump crazy-max/.github to 1.1.0
2026-03-25 10:43:53 -07:00
CrazyMax
7f6e739c6d ci: bump crazy-max/.github to 1.1.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-25 12:39:32 +01:00
CrazyMax
d91f340399 Merge pull request #497 from crazy-max/codeql
ci: enable SAST scanning with CodeQL
2026-03-20 16:57:43 +01:00
CrazyMax
3da2ceadbf ci: enable SAST scanning with CodeQL
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-20 11:56:47 +01:00
3 changed files with 47 additions and 2 deletions

View File

@@ -485,7 +485,7 @@ jobs:
uses: actions/checkout@v6
-
name: Install k3s
uses: crazy-max/.github/.github/actions/install-k3s@a94383ec9e125b23907fb6fcebf7ff87964595e5
uses: crazy-max/.github/.github/actions/install-k3s@20ef82212dc54bab5749f5e05576ca6d3c8a5773 # v1.1.0
-
name: Set up Docker Buildx
id: buildx

45
.github/workflows/codeql.yml vendored Normal file
View File

@@ -0,0 +1,45 @@
name: codeql
on:
push:
branches:
- 'master'
- 'releases/v*'
pull_request:
permissions:
actions: read
contents: read
security-events: write
env:
NODE_VERSION: "24"
jobs:
analyze:
runs-on: ubuntu-latest
steps:
-
name: Checkout
uses: actions/checkout@v6
-
name: Enable corepack
run: |
corepack enable
yarn --version
-
name: Set up Node
uses: actions/setup-node@v6
with:
node-version: ${{ env.NODE_VERSION }}
-
name: Initialize CodeQL
uses: github/codeql-action/init@v4
with:
languages: javascript-typescript
build-mode: none
-
name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v4
with:
category: "/language:javascript-typescript"

View File

@@ -11,7 +11,7 @@ on:
jobs:
run:
uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@1b673f36fad86812f538c1df9794904038a23cbf
uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@20ef82212dc54bab5749f5e05576ca6d3c8a5773 # v1.1.0
permissions:
contents: read
pull-requests: write