From 93b9ec3cd69b48adfc63e289911ef5fdc76a576d Mon Sep 17 00:00:00 2001 From: Jimmy Andrade Date: Thu, 16 Jul 2026 12:23:23 -0300 Subject: [PATCH] ci: apply CodeQL Copilot review feedback from #394 Retarget triggers to main and bump checkout/CodeQL actions so the workflow actually runs on the default branch. Co-authored-by: Cursor --- .github/workflows/codeql.yml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index f235b7db..d5800bf7 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -2,9 +2,9 @@ name: "CodeQL" on: push: - branches: [ "master" ] + branches: ["main"] pull_request: - branches: [ "master" ] + branches: ["main"] schedule: - cron: "56 13 * * 2" @@ -20,22 +20,22 @@ jobs: strategy: fail-fast: false matrix: - language: [ javascript ] + language: [javascript] steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v3 with: languages: ${{ matrix.language }} queries: +security-and-quality - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@v3 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v3 with: category: "/language:${{ matrix.language }}"