Repository navigation

chore: Bump the "dependencies" group with 3 updates across multiple ecosystems #100

	name: "CodeQL"

	on:
	push:
	branches:
	- "main"
	pull_request:
	schedule:
	- cron: "42 4 * * 3" # Every Wednesday at 4:42am

	jobs:
	analyze:
	name: Analyze (${{ matrix.language }})
	runs-on: "ubuntu-latest"
	permissions:
	security-events: write
	packages: read
	actions: read
	contents: read

	strategy:
	fail-fast: false
	matrix:
	include:
	- language: actions
	build-mode: none
	- language: javascript-typescript
	build-mode: none

	steps:
	- name: Checkout repository
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- name: Initialize CodeQL
	uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
	with:
	languages: ${{ matrix.language }}
	build-mode: ${{ matrix.build-mode }}
	queries: security-and-quality

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
	with:
	category: "/language:${{matrix.language}}"