Charles Kelsoe c6cfa81817 ci: add CodeQL code scanning workflow (#10) ... Add .github/workflows/codeql.yml for GitHub-native semantic security analysis of the TypeScript source (javascript-typescript extractor, build-mode none, no build step needed). Runs on push and PR to main plus a weekly cron, using the security-extended query suite. Complements the existing OSV-Scanner and Dependency Review jobs, which cover dependency vulnerabilities, by analyzing first-party code. This matters as the plugin moves toward write-back features that make authenticated network calls to a reverse-engineered API. Free for public repositories.		2026-06-28 18:05:15 -04:00
..
ISSUE_TEMPLATE	Add privacy policy, fix SECURITY.md, add issue templates	2026-05-15 19:09:56 -04:00
workflows	ci: add CodeQL code scanning workflow (#10)	2026-06-28 18:05:15 -04:00