Skip to content

build(deps-dev): bump tailwindcss from 3.4.19 to 4.3.1 #317

build(deps-dev): bump tailwindcss from 3.4.19 to 4.3.1

build(deps-dev): bump tailwindcss from 3.4.19 to 4.3.1 #317

Workflow file for this run

name: CodeQL
on:
push:
branches: [ main ]
pull_request:
branches: [ main ]
schedule:
# Weekly Monday at 03:17 UTC. Off-hours, avoids the top-of-the-hour
# rush that CodeQL gets when everyone schedules on '0 0 * * 1'.
- cron: '17 3 * * 1'
permissions: read-all
# CodeQL runs on the same self-hosted host as CI. Two analysis runs from
# different PRs overlapping there collide on the shared per-host CodeQL state
# and one fails fast (observed: one PR's "CodeQL" check passing while a
# concurrent PR's failed in ~1s). Serialize host-wide and queue rather than
# cancel so each PR's analysis still completes.
concurrency:
group: certmate-selfhosted-codeql
cancel-in-progress: false
jobs:
analyze:
name: Analyze ${{ matrix.language }}
runs-on: [self-hosted, Linux, X64]
permissions:
# Required to upload results to the Security tab.
security-events: write
actions: read
contents: read
strategy:
fail-fast: false
matrix:
language: [ python, javascript ]
steps:
- name: Checkout code
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
- name: Initialize CodeQL
uses: github/codeql-action/init@458d36d7d4f47d0dd16ca424c1d3cda0060f1360 # v3
with:
languages: ${{ matrix.language }}
# `security-extended` adds higher-precision queries beyond the
# default suite (more coverage, slightly higher false-positive
# rate — acceptable for a security-sensitive cert manager).
queries: security-extended
- name: Autobuild
uses: github/codeql-action/autobuild@458d36d7d4f47d0dd16ca424c1d3cda0060f1360 # v3
- name: Perform CodeQL analysis
uses: github/codeql-action/analyze@458d36d7d4f47d0dd16ca424c1d3cda0060f1360 # v3
with:
category: "/language:${{ matrix.language }}"