chore(ci): Set up CodeQL analysis

apache · Apr 16, 2024 · 9ae2e48 · 9ae2e48
1 parent 4989545
commit 9ae2e48
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -41,11 +41,25 @@ jobs:
           node --version
           npm --version
 
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: javascript
+          queries: security-and-quality
+          config: |
+            paths-ignore:
+              - coverage
+              - node_modules
+              - spec/plugman/plugins/recursivePlug/demo
+
       - name: npm install and test
         run: npm cit
         env:
           CI: true
 
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+
       - uses: codecov/codecov-action@v4
         if: success()
         with: