<feed xmlns='http://www.w3.org/2005/Atom'>
<title>tazel.net/.github/codeql, branch content/document-label</title>
<subtitle>The site of Tazel, tazel.net.</subtitle>
<link rel='alternate' type='text/html' href='https://git.progmasoft.com/tazel.net/'/>
<entry>
<title>Add CodeQL, Codecov, Codacy and actionlint</title>
<updated>2026-11-05T03:59:06+00:00</updated>
<author>
<name>Leitwolf11</name>
</author>
<published>2026-11-05T03:59:06+00:00</published>
<link rel='alternate' type='text/html' href='https://git.progmasoft.com/tazel.net/commit/?id=286256c6f9e8c1fa272ea1d7ea5631a41377f3f5'/>
<id>286256c6f9e8c1fa272ea1d7ea5631a41377f3f5</id>
<content type='text'>
- CodeQL analyses the workflows and the TypeScript and Vue sources with
  the security-extended queries, on every push to main, every pull
  request and once a week.
- The tests run under c8, and a job of its own uploads the lcov report
  to Codecov through OIDC, away from the job that installs packages.
- .codacy.yml leaves out what is generated and what is copied from
  Progmasoft/tazel and Progmasoft/tala.
- actionlint joins zizmor in Workflow Security.
- CI Required gathers the site job and Dependency Review, so a ruleset
  can require one check.

Co-Authored-By: Claude Opus 5.5 &lt;noreply@anthropic.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
- CodeQL analyses the workflows and the TypeScript and Vue sources with
  the security-extended queries, on every push to main, every pull
  request and once a week.
- The tests run under c8, and a job of its own uploads the lcov report
  to Codecov through OIDC, away from the job that installs packages.
- .codacy.yml leaves out what is generated and what is copied from
  Progmasoft/tazel and Progmasoft/tala.
- actionlint joins zizmor in Workflow Security.
- CI Required gathers the site job and Dependency Review, so a ruleset
  can require one check.

Co-Authored-By: Claude Opus 5.5 &lt;noreply@anthropic.com&gt;
</pre>
</div>
</content>
</entry>
</feed>
