[FEATURE] Add CodeQL Workflow

[abhinav-m22]

Description

Although the repository has javascript code, it lacks workflow for code inspection.

The codeql.yml workflow file will be added by me to automate security checks.

CodeQL is a code analysis tool, to find vulnerabilities in programs. The code will be examined, and the results will be presented as code scanning alerts. Every push, commit, and pull request that uses GitHub actions will have it enabled.

Screenshots

No response

Additional information

I want to work on this issue under GSSoC'23

[github-actions]

Hi there, Thanks a lot for raising the issue, we'll look into it asap. Also please mention if you wish to work on the issue as well so you could be assigned

[narayan954]

Description

Although the repository has javascript code, it lacks workflow for code inspection.

The codeql.yml workflow file will be added by me to automate security checks.

CodeQL is a code analysis tool, to find vulnerabilities in programs. The code will be examined, and the results will be presented as code scanning alerts. Every push, commit, and pull request that uses GitHub actions will have it enabled.

Screenshots

No response

Additional information

I want to work on this issue under GSSoC'23

Hi @abhinav-m22 codeql workflow exists already as you can see.

[abhinav-m22]

@narayan954
Yes but there is no yml script in the repository.
I think adding that particular file will make the codebase standard and other people can understand about the working of codeql and it's properties.

That's the reason I created the issue.
Please give a think and let me know!

[narayan954]

@narayan954 Yes but there is no yml script in the repository. I think adding that particular file will make the codebase standard and other people can understand about the working of codeql and it's properties.

That's the reason I created the issue. Please give a think and let me know!

Agreed, you can fix this!