commit 602272feea849fed9f40fc298d9fb3992989b61c
author Darryl Pogue <darryl@dpogue.ca> Tue Apr 16 19:35:19 2024 -0700
committer GitHub <noreply@github.com> Tue Apr 16 19:35:19 2024 -0700
tree 262f57246af232bfd754c5b053ac8526c0aa962b
parent 0901c1dcaef43634ce91fcc2ab1657c0a5982c49

chore(ci): Set up CodeQL analysis (#206)

.github/workflows/ci.yml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a434629..e1136f3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -41,11 +41,22 @@
           node --version
           npm --version
 
+      - uses: github/codeql-action/init@v3
+        with:
+          languages: javascript
+          queries: security-and-quality
+          config: |
+            paths-ignore:
+              - coverage
+              - node_modules
+
       - name: npm install and test
         run: npm cit
         env:
           CI: true
 
+      - uses: github/codeql-action/analyze@v3
+
       - uses: codecov/codecov-action@v4
         if: success()
         with: