security-scan.yml

name: "Security Scan"

on:
  schedule:
    - cron: "17 2 * * 2"
  workflow_run:
    workflows:
      - CD
    types:
      - completed
  pull_request:
    branches: [main]
    types: [opened, edited, synchronize, reopened]

jobs:
  codeql:
    name: CodeQL
    runs-on: ubuntu-latest
    permissions:
      actions: read
      contents: read
      security-events: write

    strategy:
      fail-fast: false
      matrix:
        language: ["javascript"]

    steps:
      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
      - name: CodeQL
        uses: ./.github/actions/codeql
        with:
          language: ${{ matrix.language }}