codeql-analysis.yml

name: 'CodeQL'

on:
  schedule:
    - cron: '0 10 * * MON'

permissions:
  contents: read

jobs:
  'Analyze':
    permissions:
      actions: read # for github/codeql-action/init to get workflow details
      contents: read # for actions/checkout to fetch code
      security-events: write # for github/codeql-action/analyze to upload SARIF results
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        language: ['javascript']
    steps:
      - name: 'Checkout repository'
        uses: actions/checkout@v4
      - name: 'Initialize CodeQL'
        uses: github/codeql-action/init@v3
        with:
          languages: ${{ matrix.language }}
      - name: 'Perform CodeQL Analysis'
        uses: github/codeql-action/analyze@v3