diff options
Diffstat (limited to '.github')
| -rw-r--r-- | .github/workflows/codeql.yml | 13 | ||||
| -rw-r--r-- | .github/workflows/deploy.yml | 9 | ||||
| -rw-r--r-- | .github/workflows/release-notes.yml | 1 | ||||
| -rw-r--r-- | .github/workflows/test.yml | 5 |
4 files changed, 23 insertions, 5 deletions
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 008b770..225e2ef 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -6,11 +6,12 @@ on: - main - "!dependabot/**" pull_request: - # The branches below must be a subset of the branches above branches: - main + - "!dependabot/**" schedule: - cron: "0 0 * * 0" + workflow_dispatch: jobs: analyze: @@ -22,13 +23,21 @@ jobs: security-events: write steps: - - name: Checkout repository + - name: Clone repository uses: actions/checkout@v3 + with: + persist-credentials: false - name: Initialize CodeQL uses: github/codeql-action/init@v2 with: languages: "javascript" + queries: +security-and-quality + + - name: Autobuild + uses: github/codeql-action/autobuild@v2 - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v2 + with: + category: "/language:javascript" diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index e8a396e..f87c1ca 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -7,7 +7,7 @@ on: env: FORCE_COLOR: 2 - NODE: 16 + NODE: 18 jobs: deploy: @@ -17,6 +17,8 @@ jobs: steps: - name: Clone repository uses: actions/checkout@v3 + with: + persist-credentials: false - name: Set up Node.js uses: actions/setup-node@v3 @@ -45,7 +47,10 @@ jobs: needs: deploy runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - name: Clone repository + uses: actions/checkout@v3 + with: + persist-credentials: false - uses: actions/setup-node@v3 with: diff --git a/.github/workflows/release-notes.yml b/.github/workflows/release-notes.yml index 1c4f4be..babe51a 100644 --- a/.github/workflows/release-notes.yml +++ b/.github/workflows/release-notes.yml @@ -4,6 +4,7 @@ on: push: branches: - main + workflow_dispatch: jobs: update_release_draft: diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 29cad2c..94ca588 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -5,10 +5,11 @@ on: branches-ignore: - "dependabot/**" pull_request: + workflow_dispatch: env: FORCE_COLOR: 2 - NODE: 16 + NODE: 18 jobs: test: @@ -17,6 +18,8 @@ jobs: steps: - name: Clone repository uses: actions/checkout@v3 + with: + persist-credentials: false - name: Set up Node.js uses: actions/setup-node@v3 |