Context Continuation MCP Server

name: Security & Dependencies on: schedule: # Run every Monday at 9 AM UTC - cron: '0 9 * * 1' workflow_dispatch: jobs: security-audit: runs-on: ubuntu-latest steps: - name: Checkout code uses: actions/checkout@v4 - name: Use Node.js 20.x uses: actions/setup-node@v4 with: node-version: 20.x cache: 'npm' - name: Install dependencies run: npm ci - name: Run security audit run: npm audit - name: Check for outdated dependencies run: npm outdated || true - name: Run dependency license check run: npx license-checker --summary codeql-analysis: runs-on: ubuntu-latest permissions: actions: read contents: read security-events: write steps: - name: Checkout code uses: actions/checkout@v4 - name: Initialize CodeQL uses: github/codeql-action/init@v2 with: languages: javascript - name: Use Node.js 20.x uses: actions/setup-node@v4 with: node-version: 20.x cache: 'npm' - name: Install dependencies run: npm ci - name: Build project run: npm run build - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v2