codeql.yml

# This workflow is managed by gh actions-lock.
# SPDX-License-Identifier: MPL-2.0
name: CodeQL Security Analysis

on:
  push:
    branches: [main, master]
  pull_request:
    branches: [main, master]
  schedule:
    - cron: '0 6 * * 1'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: false

permissions:
  contents: read

jobs:
  analyze-js:
    permissions:
      actions: read
      contents: read
      security-events: write
    uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@210f14e753c80064ec1bcae72f1d654dd9b0e687
    with:
      language: javascript-typescript