diff options
| author | Leitwolf11 | 2026-11-05 06:59:06 +0300 |
|---|---|---|
| committer | Leitwolf11 | 2026-11-05 06:59:06 +0300 |
| commit | 286256c6f9e8c1fa272ea1d7ea5631a41377f3f5 (patch) | |
| tree | 37ede6016dd0bd95fc3fb3993c62a11be7c349b1 /.github/codeql | |
| parent | 6f114e3df68d0b20c7e58c5ffb8c46070317008a (diff) | |
| download | tazel.net-286256c6f9e8c1fa272ea1d7ea5631a41377f3f5.tar.gz | |
Add CodeQL, Codecov, Codacy and actionlint
- CodeQL analyses the workflows and the TypeScript and Vue sources with
the security-extended queries, on every push to main, every pull
request and once a week.
- The tests run under c8, and a job of its own uploads the lcov report
to Codecov through OIDC, away from the job that installs packages.
- .codacy.yml leaves out what is generated and what is copied from
Progmasoft/tazel and Progmasoft/tala.
- actionlint joins zizmor in Workflow Security.
- CI Required gathers the site job and Dependency Review, so a ruleset
can require one check.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to '.github/codeql')
| -rw-r--r-- | .github/codeql/codeql-config.yml | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml new file mode 100644 index 0000000..98084f3 --- /dev/null +++ b/.github/codeql/codeql-config.yml @@ -0,0 +1,9 @@ +# SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com> +# SPDX-License-Identifier: AGPL-3.0-or-later WITH AdditionRef-Progmasoft-Patent-Grant-1.1 + +name: tazel.net owned sources +paths-ignore: + - node_modules + - .nuxt + - .output + - content |