Gravity MCP

name: Security on: push: branches: [ main ] pull_request: branches: [ main ] schedule: # Run security scan weekly on Monday at 2 AM UTC - cron: '0 2 * * 1' jobs: security: runs-on: ubuntu-latest steps: - name: Checkout code uses: actions/checkout@v4 - name: Setup Node.js uses: actions/setup-node@v4 with: node-version: '20' - name: Install dependencies run: npm ci - name: Run npm audit run: npm audit --audit-level=moderate || true continue-on-error: true - name: Run CodeQL Analysis uses: github/codeql-action/init@v3 with: languages: javascript - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v3