mirror of
https://github.com/mmomm-org/obsidian-newtab.git
synced 2026-07-22 07:43:53 +00:00
876ecfb68d
The repo's default branch is `main`, but release.yml, .releaserc.json and codeql.yml all triggered on `master` — a branch that doesn't exist here. As a result the Release workflow never ran, no GitHub release was ever cut, and the manifest stayed at the 0.0.0 placeholder. This is the root cause of the Obsidian community check "No release matches your manifest version", and CodeQL never ran for the same reason. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
51 lines
1.3 KiB
YAML
51 lines
1.3 KiB
YAML
# GitHub CodeQL static analysis. Stock template, no per-repo edits required.
|
|
# CodeQL runs on push/PR to main plus a weekly cron — failed checks surface
|
|
# as Security alerts in the GitHub repo.
|
|
|
|
name: "CodeQL Advanced"
|
|
|
|
on:
|
|
push:
|
|
branches: ["main"]
|
|
pull_request:
|
|
branches: ["main"]
|
|
schedule:
|
|
- cron: "25 7 * * 4"
|
|
|
|
# Least-privilege default at workflow level; analyze job overrides as needed.
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
analyze:
|
|
name: Analyze (${{ matrix.language }})
|
|
runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
|
|
permissions:
|
|
security-events: write
|
|
packages: read
|
|
actions: read
|
|
contents: read
|
|
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- language: actions
|
|
build-mode: none
|
|
- language: javascript-typescript
|
|
build-mode: none
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@v4
|
|
with:
|
|
languages: ${{ matrix.language }}
|
|
build-mode: ${{ matrix.build-mode }}
|
|
|
|
- name: Perform CodeQL Analysis
|
|
uses: github/codeql-action/analyze@v4
|
|
with:
|
|
category: "/language:${{matrix.language}}"
|