codeql-analysis.yml

name: 'CodeQL'

on:
    push:
        branches: [main]
    schedule:
        - cron: '30 8 * * 5'

jobs:
    analyze:
        name: Analyze
        runs-on: ubuntu-latest
        permissions:
            actions: read
            contents: read
            security-events: write

        steps:
            - uses: actions/checkout@v4
            - name: Use Node.js 20
              uses: actions/setup-node@v4
              with:
                  node-version: 20.11.1
            - name: Use node_modules cache
              uses: actions/cache@v4
              with:
                  path: node_modules
                  key: yarn-node-20-lock-${{ hashFiles('yarn.lock') }}
                  restore-keys: |
                      yarn-node-20-lock-
            - name: Initialize CodeQL
              uses: github/codeql-action/init@v3
              with:
                  languages: javascript
            - run: yarn install --frozen-lockfile
            - run: yarn build
            - name: Perform CodeQL Analysis
              uses: github/codeql-action/analyze@v3