feat(CI): 新增codeql流水线

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,36 @@
+name: CodeQL
+
+on:
+  #  push:
+  pull_request:
+    branches:
+      - next
+  schedule:
+    - cron: "30 7 * * 3"
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          queries: +security-extended
+          # Override language selection by uncommenting this and choosing your languages
+          # with:
+          # languages: go, javascript, csharp, python, cpp, java
+          languages: javascript
+
+      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+      # If this step fails, then you should remove it and run the build manually (see below)
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v2
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2

Dockerfile

@@ -14,6 +14,7 @@ ARG CONTAINER_BUILD
 WORKDIR /apps
 COPY . .
 
+RUN echo $CONTAINER_BUILD;
 
 ## 基于容器自动构建
 RUN if [ "$CONTAINER_BUILD" = "true" ]; then  \
@@ -24,6 +25,7 @@ FROM registry.cn-hangzhou.aliyuncs.com/142vip/nginx:1.23.0-alpine
 ARG APP_VERSION
 LABEL version=$APP_VERSION  description="JavaScriptCollection文档合集、博客"
 LABEL author="【Github&公众号】：储凡" email="fairy@2925.com"
+
 # 将dist文件中的内容复制到 /usr/share/nginx/html/ 这个目录下面 注意：--from参数
 COPY  --from=build_base /apps/docs/.vuepress/dist/  /usr/share/nginx/html/
 COPY nginx.conf /etc/nginx/