ci: add codeql workflow

[Mister-Hope]

No description provided.

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[coveralls]

Coverage Report for CI Build 25540770561

Coverage remained the same at 73.756%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	1034
Covered Lines:	760
Line Coverage:	73.5%
Relevant Branches:	513
Covered Branches:	381
Branch Coverage:	74.27%
Branches in Coverage %:	Yes
Coverage Strength:	44.63 hits per line

---

💛 - Coveralls

[Copilot]

Pull request overview

Adds a GitHub Actions workflow to run GitHub CodeQL “Advanced” analysis on pushes, PRs, and a weekly schedule, covering both GitHub Actions and JavaScript/TypeScript code in this repository.

Changes:

• Introduces a new .github/workflows/codeql.yml workflow triggered on push, pull_request, and a weekly cron.
• Configures a matrix to analyze actions and javascript-typescript with build-mode: none.
• Uploads CodeQL results via github/codeql-action/analyze.

Comments suppressed due to low confidence (1)

.github/workflows/codeql.yml:45

• github/codeql-action/init@v4 and github/codeql-action/analyze@v4 are newer than the versions used in most CodeQL examples and may not exist/resolve. If you’re not intentionally targeting a new major, consider pinning to an established major version (and keep init/analyze on the same major).

        uses: github/codeql-action/analyze@v4
        with:
          category: '/language:${{matrix.language}}'

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.