Merge pull request #622 from crazy-max/codeql

ci: enable SAST scanning with CodeQL
2026-03-21 18:17:31 +00:00 · 2026-03-20 16:57:23 +01:00 · 2026-03-20 11:51:51 +01:00 · 2026-03-18 23:06:56 +01:00 · 2026-03-18 19:24:41 +00:00 · 2026-03-18 19:23:34 +00:00
5 changed files with 55 additions and 10 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,45 @@
+name: codeql
+
+on:
+  push:
+    branches:
+      - 'master'
+      - 'releases/v*'
+  pull_request:
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+env:
+  NODE_VERSION: "24"
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v6
+      -
+        name: Enable corepack
+        run: |
+          corepack enable
+          yarn --version
+      -
+        name: Set up Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+      -
+        name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
+        with:
+          languages: javascript-typescript
+          build-mode: none
+      -
+        name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v4
+        with:
+          category: "/language:javascript-typescript"
--- a/dist/index.js
+++ b/dist/index.js
--- a/dist/index.js.map
+++ b/dist/index.js.map
--- a/package.json
+++ b/package.json
@@ -31,7 +31,7 @@
    "csv-parse": "^6.1.0",
    "handlebars": "^4.7.8",
    "moment": "^2.30.1",
-    "moment-timezone": "^0.6.0",
+    "moment-timezone": "^0.6.1",
    "semver": "^7.7.4"
  },
  "devDependencies": {
--- a/yarn.lock
+++ b/yarn.lock
@@ -2160,7 +2160,7 @@ __metadata:
    globals: "npm:^17.3.0"
    handlebars: "npm:^4.7.8"
    moment: "npm:^2.30.1"
-    moment-timezone: "npm:^0.6.0"
+    moment-timezone: "npm:^0.6.1"
    prettier: "npm:^3.8.1"
    semver: "npm:^7.7.4"
    typescript: "npm:^5.9.3"
@@ -3511,12 +3511,12 @@ __metadata:
  languageName: node
  linkType: hard

-"moment-timezone@npm:^0.6.0":
-  version: 0.6.0
-  resolution: "moment-timezone@npm:0.6.0"
+"moment-timezone@npm:^0.6.1":
+  version: 0.6.1
+  resolution: "moment-timezone@npm:0.6.1"
  dependencies:
    moment: "npm:^2.29.4"
-  checksum: 10/324df65c9ed622c75d4e39dc5daf01dfcd8b4cb4eb63dec3270ddbfed3f5357e4d4b22a39bf3b4fe1fe2d78b21307abddfb13e7aa6a19b69b7f33bb712c8ad55
+  checksum: 10/20a80969712e35cab0ccda1cebe6fd768201bc1c9aa4528881bb8dd352bfcae2564546bf634ee7768aafd1dabb8054982964590084a1af8feab0574dd1d3ea3e
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
CrazyMax	1107934206	Merge pull request #622 from crazy-max/codeql ci: enable SAST scanning with CodeQL	2026-03-20 16:57:23 +01:00
CrazyMax	50e32640d5	ci: enable SAST scanning with CodeQL Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-20 11:51:51 +01:00
CrazyMax	d24d429af2	Merge pull request #619 from docker/dependabot/npm_and_yarn/moment-timezone-0.6.1 chore(deps): Bump moment-timezone from 0.6.0 to 0.6.1	2026-03-18 23:06:56 +01:00
github-actions[bot]	d3cc762016	chore: update generated content	2026-03-18 19:24:41 +00:00
dependabot[bot]	e724a31677	chore(deps): Bump moment-timezone from 0.6.0 to 0.6.1 Bumps [moment-timezone](https://github.com/moment/moment-timezone) from 0.6.0 to 0.6.1. - [Release notes](https://github.com/moment/moment-timezone/releases) - [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md) - [Commits](https://github.com/moment/moment-timezone/compare/0.6.0...0.6.1) --- updated-dependencies: - dependency-name: moment-timezone dependency-version: 0.6.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-18 19:23:34 +00:00