Skip to content

Add CodeQL security scanning - #136

Merged
nicolasiscoding merged 1 commit into
developfrom
feat/add-codeql-scanning
Oct 9, 2025
Merged

Add CodeQL security scanning#136
nicolasiscoding merged 1 commit into
developfrom
feat/add-codeql-scanning

Conversation

@nicolasiscoding

@nicolasiscoding nicolasiscoding commented Oct 8, 2025

Copy link
Copy Markdown
Member

Summary

  • Add automated security analysis with CodeQL workflow
  • Configure weekly scans and analysis on push/PR
  • Add CodeQL badge to README

Changes

  • Created .github/workflows/codeql.yml workflow that:
    • Runs on push/PR to main and develop branches
    • Runs weekly scheduled scans (Mondays at midnight UTC)
    • Uses security-extended and security-and-quality query suites
    • Analyzes JavaScript codebase
  • Added CodeQL workflow badge to README

Test plan

  • Workflow file syntax validated
  • Badge URL points to correct workflow
  • Verify workflow runs successfully after merge

🤖 Generated with Claude Code

@nicolasiscoding @claude
feat: add CodeQL security scanning workflow
8274627 
Add automated security analysis with CodeQL that runs on push/PR to main
and develop branches, with weekly scheduled scans on Mondays using
security-extended and security-and-quality queries. Add CodeQL badge to
README.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
@nicolasiscoding
nicolasiscoding changed the base branch from main to develop October 8, 2025 05:36
@nicolasiscoding nicolasiscoding self-assigned this Oct 8, 2025
@github-actions

github-actions Bot commented Oct 8, 2025

Copy link
Copy Markdown

TurboDocx DOCX Diff Report

Automated HTML to DOCX regression testing | Powered by TurboDocx

Summary

  • ✅ Identical files: 61
  • 🔄 Changed files: 0
  • ➕ New files: 0
  • ➖ Deleted files: 0

🚀 Powered by TurboDocx | html-to-docx

Automated DOCX regression testing • Catch document generation bugs before they ship • 100% open source

Generated by TurboDocx DOCX Diff workflow • Learn more

@github-advanced-security

github-advanced-security AI commented Oct 8, 2025

Copy link
Copy Markdown

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@nicolasiscoding
nicolasiscoding merged commit f3ce93c into develop Oct 9, 2025
4 checks passed
@K-Kumar-01
K-Kumar-01 deleted the feat/add-codeql-scanning branch February 5, 2026 18:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@K-Kumar-01 K-Kumar-01 Awaiting requested review from K-Kumar-01

Assignees

@nicolasiscoding nicolasiscoding

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@nicolasiscoding @github-advanced-security