Attio MCP Server

name: 'CodeQL (JS/TS, prod-focused)' on: push: branches: ['main'] pull_request: branches: ['main'] paths: - 'src/**' - 'package*.json' - 'tsconfig*.json' - '.github/workflows/codeql.yml' - 'codeql-config.yml' schedule: - cron: '30 7 * * 1' # Weekly Monday 07:30 UTC workflow_dispatch: concurrency: group: codeql-${{ github.ref }} cancel-in-progress: true jobs: analyze: name: Analyze (${{ matrix.language }}) runs-on: ubuntu-latest permissions: # required for all workflows security-events: write # required to fetch internal or private CodeQL packs packages: read # only required for workflows in private repositories actions: read contents: read strategy: fail-fast: false matrix: include: - language: javascript-typescript build-mode: none steps: - name: Checkout repository uses: actions/checkout@v4 - name: Initialize CodeQL uses: github/codeql-action/init@v3 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} config-file: codeql-config.yml - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v3 with: category: '/language:${{matrix.language}}'