Add CodeQL

[jaseel0]

🚀 BΞYTΞFLʘW | Pull Request Protocol

PR Type: (Choose one: feat | fix | refactor | docs | perf)
Issue Link: Fixes #

---

📝 System Summary

Provide a concise brief of the changes introduced to the stream.

🛠️ Technical Changes

• Logic change in ...
• New UI component added: ...
• Database schema updated: ...

🧪 Quality Assurance (QA)

• Linting: Code style matches the BeyteFlow grid.
• Build: npm run build executed without errors.
• Testing: New logic has been verified and tested.
• Dark Mode: UI is high-contrast and neon-optimized.

🖼️ Visual Evidence

If this PR affects the UI, drop a screenshot or GIF below:

---

📡 Developer Authorization

• I have performed a self-review of my code.
• My changes generate no new warnings in the console.
• I have updated the documentation (if applicable).

Authorized by: @jaseel0
Timestamp: {{ 26/2/2026 }}

---

Summary by CodeRabbit

• Chores
  • Enabled continuous CodeQL security scanning on pushes, pull requests, and scheduled intervals to improve code quality and vulnerability detection.

[coderabbitai]

📝 Walkthrough

Walkthrough

A new CodeQL analysis workflow has been added that automatically runs static analysis on JavaScript code. The workflow triggers on pushes to main, pull requests, and weekly schedules, executing checkout, CodeQL initialization, autobuild, and analysis steps.

Changes

Cohort / File(s)	Summary
CodeQL Workflow Configuration .github/workflows/codeql.yml	New GitHub Actions workflow file configuring automated CodeQL security analysis for JavaScript, triggered on main branch pushes, pull requests, and weekly schedules with standard initialization and analysis steps.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Suggested reviewers

• naheel0

Poem

🐰 Security scans now hop into place,
CodeQL guards your coding space,
Weekly watches, on every PR,
A safer codebase, that's for sure! ✨

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title 'Add CodeQL' is vague and generic, using minimal descriptive language that doesn't convey the specific purpose or scope of the change.	Consider revising the title to be more specific, such as 'Add CodeQL workflow for JavaScript security scanning' to better communicate the actual change and its purpose.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[coderabbitai]

Actionable comments posted: 1

🧹 Nitpick comments (1)

.github/workflows/codeql.yml (1)

29-35: For JavaScript, prefer build-mode: none and remove autobuild unless needed.

For JS/TS repos, autobuild can add avoidable failure points. Set build-mode: none in init and drop the autobuild step unless you rely on generated artifacts during analysis.

⚙️ Suggested simplification

       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
         with:
           languages: ${{ matrix.language }}
+          build-mode: none

-      - name: Autobuild
-        uses: github/codeql-action/autobuild@v3

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In @.github/workflows/codeql.yml around lines 29 - 35, Update the CodeQL
workflow: in the "Initialize CodeQL" step (uses: github/codeql-action/init@v3)
add with: build-mode: none for JavaScript/TypeScript analysis, and remove the
separate "Autobuild" step (uses: github/codeql-action/autobuild@v3) unless your
repo requires generated build artifacts; keep the languages matrix as-is and
ensure any necessary build artifacts are produced elsewhere if you decide to
keep autobuild.

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In @.github/workflows/codeql.yml:
- Around line 26-40: Replace the mutable action tags with pinned 40-character
commit SHAs for each GitHub Action used: actions/checkout,
github/codeql-action/init, github/codeql-action/autobuild, and
github/codeql-action/analyze; locate the invocations of those actions in the
workflow (the steps named "Checkout repository", "Initialize CodeQL",
"Autobuild", and "Perform CodeQL Analysis") and update the uses: value from e.g.
actions/checkout@v4 to the full commit SHA for the corresponding release,
ensuring each uses: entry references the exact commit SHA (40 chars) so the
workflow is immutable and reproducible.

---

Nitpick comments:
In @.github/workflows/codeql.yml:
- Around line 29-35: Update the CodeQL workflow: in the "Initialize CodeQL" step
(uses: github/codeql-action/init@v3) add with: build-mode: none for
JavaScript/TypeScript analysis, and remove the separate "Autobuild" step (uses:
github/codeql-action/autobuild@v3) unless your repo requires generated build
artifacts; keep the languages matrix as-is and ensure any necessary build
artifacts are produced elsewhere if you decide to keep autobuild.

---

ℹ️ Review info

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between a759cc0 and 1759c97.

📒 Files selected for processing (1)

• .github/workflows/codeql.yml