Fix code scanning workflow

.github/codeql/codeql-config.yaml

@@ -6,8 +6,5 @@ queries:
   - uses: ./javascript/frameworks/ui5/src/codeql-suites/javascript-security-extended.qls
   - uses: ./javascript/frameworks/cap/src/codeql-suites/javascript-security-extended.qls
 
-paths:
-  - "**/*.xml"
-  - "**/*.json"
 paths-ignore:
   - "**/frameworks/*/test/models"

.github/workflows/code_scanning.yml

@@ -12,7 +12,7 @@ on:
 
 env:
   LGTM_INDEX_XML_MODE: all
-  LGTM_INDEX_FILTERS: "include:**/*.json"
+  LGTM_INDEX_FILTERS: "include:**/*.json\ninclude:**/*.js"
 
 jobs:
   analyze:
@@ -37,6 +37,7 @@ jobs:
           mv $dir .github/codeql/extensions/$dir
         done
 
+
     - name: Ensure presence of cds shell command
       run: |
         if ! command -v cds &> /dev/null
@@ -55,19 +56,16 @@ jobs:
             -o "$cds_file.json"
         done
 
-    # Initializes the CodeQL tools for scanning.
-    - name: Extract version from qlt.conf.json
-      uses: sergeysova/jq-action@v2
-      id: version
-      with:
-        cmd: 'jq .CodeQLCLIBundle qlt.conf.json -r'
-
+    - name: Extract CodeQL bundle version
+      run: |
+        echo "BUNDLE_VERSION=$(jq .CodeQLCLIBundle qlt.conf.json -r)" >> $GITHUB_ENV
+
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v3
       with:
         languages: javascript
         config-file: ./.github/codeql/codeql-config.yaml
-        tools: https://github.com/github/codeql-action/releases/download/${{steps.version.outputs.value}}/codeql-bundle-linux64.tar.gz
+        tools: https://github.com/github/codeql-action/releases/download/${{env.BUNDLE_VERSION}}/codeql-bundle-linux64.tar.gz
         debug: true
 
     - name: Perform CodeQL Analysis

.github/workflows/run-codeql-unit-tests-javascript.yml

@@ -18,7 +18,7 @@ jobs:
       matrix: ${{ steps.export-unit-test-matrix.outputs.matrix }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Install QLT
         id: install-qlt
@@ -43,7 +43,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Install QLT
         id: install-qlt
@@ -116,7 +116,7 @@ jobs:
           --work-dir $RUNNER_TMP
 
       - name: Upload test results
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v4
         with:
           name: test-results-${{ runner.os }}-${{ matrix.codeql_cli }}-${{ matrix.codeql_standard_library_ident }}
           path: |
@@ -130,7 +130,7 @@ jobs:
     steps:
 
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Install QLT
         id: install-qlt
@@ -141,7 +141,7 @@ jobs:
 
 
       - name: Collect test results
-        uses: actions/download-artifact@v2
+        uses: actions/download-artifact@v4
 
       - name: Validate test results
         run: |

qlt.conf.json

@@ -2,4 +2,4 @@
   "CodeQLCLI": "2.17.3",
   "CodeQLStandardLibrary": "codeql-cli/v2.17.3",
   "CodeQLCLIBundle": "codeql-bundle-v2.17.3"
-}
+}