agent-desktop/.github/workflows/codeql.yml
Lahfir 1fb5a7d51e
fix: stabilize empty accessibility identity refs
* fix: treat empty accessibility text as missing identity

* fix: align help and skill snapshot docs

* fix: preserve accessibility descriptions in refs

* fix: resolve refs after window title drift

* fix: harden stale ref identity resolution

* ci: add explicit CodeQL workflow

* fix: fail closed when scoped refs drift
2026-05-23 06:07:32 -04:00

59 lines
1.5 KiB
YAML

name: CodeQL
on:
pull_request:
push:
branches: [main, master]
schedule:
- cron: '22 8 * * 1'
workflow_dispatch:
concurrency:
group: codeql-${{ github.ref }}
cancel-in-progress: true
permissions: {}
jobs:
analyze-interpreted:
name: Analyze (${{ matrix.language }})
runs-on: ubuntu-latest
timeout-minutes: 15
permissions:
actions: read
contents: read
security-events: write
strategy:
fail-fast: false
matrix:
language: [actions, javascript-typescript]
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Initialize CodeQL
uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
with:
languages: ${{ matrix.language }}
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
analyze-rust:
name: Analyze (rust)
runs-on: ubuntu-latest
timeout-minutes: 15
permissions:
actions: read
contents: read
security-events: write
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Initialize CodeQL
uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
with:
languages: rust
build-mode: none
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0