Repository navigation

CodeQL #105

	name: CodeQL

	on:
	push:
	branches: [main]
	workflow_dispatch:
	schedule:
	- cron: '23 3 * * 1'

	permissions:
	contents: read

	jobs:
	analyze:
	name: Analyze
	runs-on: ubuntu-latest
	permissions:
	actions: read
	contents: read
	security-events: write

	steps:
	- name: Checkout
	uses: actions/checkout@v6

	- name: Setup Node
	uses: actions/setup-node@v6
	with:
	node-version: 22
	cache: npm
	cache-dependency-path: \|
	web/package-lock.json
	server/package-lock.json

	- name: Initialize CodeQL
	uses: github/codeql-action/init@v4
	with:
	languages: javascript-typescript

	# For TypeScript projects, CodeQL results are typically better if we
	# install deps and run the actual build (instead of relying on autobuild).
	- name: Install dependencies
	run: \|
	npm --prefix web ci
	npm --prefix server ci

	- name: Build
	run: \|
	npm --prefix web run build
	npm --prefix server run build

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v4