Merge 410337075f into d91f340399

Merge pull request #497 from crazy-max/codeql
ci: enable SAST scanning with CodeQL
2026-05-12 21:38:13 +00:00 · 2026-03-20 17:14:25 +00:00 · 2026-03-20 16:57:43 +01:00 · 2026-03-20 11:56:47 +01:00 · 2026-03-09 04:44:08 +00:00 · 2026-03-09 04:43:08 +00:00
5 changed files with 53 additions and 8 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@ -0,0 +1,45 @@
+name: codeql
+
+on:
+  push:
+    branches:
+      - 'master'
+      - 'releases/v*'
+  pull_request:
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+env:
+  NODE_VERSION: "24"
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v6
+      -
+        name: Enable corepack
+        run: |
+          corepack enable
+          yarn --version
+      -
+        name: Set up Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+      -
+        name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
+        with:
+          languages: javascript-typescript
+          build-mode: none
+      -
+        name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v4
+        with:
+          category: "/language:javascript-typescript"
--- a/dist/index.js
+++ b/dist/index.js
--- a/dist/index.js.map
+++ b/dist/index.js.map
--- a/package.json
+++ b/package.json
@ -23,7 +23,7 @@
  "packageManager": "yarn@4.9.2",
  "dependencies": {
    "@actions/core": "^3.0.0",
-    "@docker/actions-toolkit": "^0.79.0",
+    "@docker/actions-toolkit": "^0.80.0",
    "js-yaml": "^4.1.1"
  },
  "devDependencies": {
--- a/yarn.lock
+++ b/yarn.lock
@ -367,9 +367,9 @@ __metadata:
  languageName: node
  linkType: hard

-"@docker/actions-toolkit@npm:^0.79.0":
-  version: 0.79.0
-  resolution: "@docker/actions-toolkit@npm:0.79.0"
+"@docker/actions-toolkit@npm:^0.80.0":
+  version: 0.80.0
+  resolution: "@docker/actions-toolkit@npm:0.80.0"
  dependencies:
    "@actions/artifact": "npm:^6.2.0"
    "@actions/cache": "npm:^6.0.0"
@ -393,7 +393,7 @@ __metadata:
    semver: "npm:^7.7.4"
    tar-stream: "npm:^3.1.7"
    tmp: "npm:^0.2.5"
-  checksum: 10/d64849ba49b2b59e2e93237a70be03fd7c43b1f7f01bac3f7557616ba5f59be785cb12a273bbb6a71c1e0d959f1bc6c673111b587c57bd2d6da105dcc500921a
+  checksum: 10/cd805370b3ece50f42a391fc09a11588fc69ef3aac729c2002416402c13040cf43c63676554a5118243a2c09227d4d566baf8bf557a26291063e8278d35af819
  languageName: node
  linkType: hard

@ -2089,7 +2089,7 @@ __metadata:
  resolution: "docker-setup-buildx@workspace:."
  dependencies:
    "@actions/core": "npm:^3.0.0"
-    "@docker/actions-toolkit": "npm:^0.79.0"
+    "@docker/actions-toolkit": "npm:^0.80.0"
    "@eslint/js": "npm:^9.39.3"
    "@types/js-yaml": "npm:^4.0.9"
    "@types/node": "npm:^24.11.0"
Author	SHA1	Message	Date
dependabot[bot]	61b0ebdf2a	Merge `410337075f` into `d91f340399`	2026-03-20 17:14:25 +00:00
CrazyMax	d91f340399	Merge pull request #497 from crazy-max/codeql ci: enable SAST scanning with CodeQL	2026-03-20 16:57:43 +01:00
CrazyMax	3da2ceadbf	ci: enable SAST scanning with CodeQL Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-20 11:56:47 +01:00
github-actions[bot]	410337075f	chore: update generated content	2026-03-09 04:44:08 +00:00
dependabot[bot]	9ad20b49a6	build(deps): bump @docker/actions-toolkit from 0.79.0 to 0.80.0 Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.80.0. - [Release notes](https://github.com/docker/actions-toolkit/releases) - [Commits](https://github.com/docker/actions-toolkit/compare/v0.79.0...v0.80.0) --- updated-dependencies: - dependency-name: "@docker/actions-toolkit" dependency-version: 0.80.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-09 04:43:08 +00:00