Skip to content

ci: update action oven-sh/setup-bun from 4bc047a to 735343b #141

ci: update action oven-sh/setup-bun from 4bc047a to 735343b

ci: update action oven-sh/setup-bun from 4bc047a to 735343b #141

Workflow file for this run

name: CodeQL
on:
push:
branches:
- main
pull_request:
branches:
- main
schedule:
- cron: "0 0 * * 1"
workflow_dispatch:
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
cancel-in-progress: true
permissions:
packages: read
actions: read
contents: read
jobs:
analyze:
name: Code analyze
runs-on: ubuntu-24.04
permissions:
security-events: write
strategy:
matrix:
include:
- language: javascript-typescript
build-mode: none
steps:
- name: Harden runner
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
with:
disable-sudo: true
egress-policy: block
allowed-endpoints: >
api.github.com:443
github.com:443
objects.githubusercontent.com
uploads.github.com:443
- name: Git checkout
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
persist-credentials: false
- name: Initialize CodeQL
uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
with:
category: "/language:${{matrix.language}}"