db-mcp

name: "CodeQL Analysis" on: push: branches: [ "main" ] paths: - '**.js' - '**.jsx' - '**.ts' - '**.tsx' - '**.mjs' - '**.cjs' - 'package.json' pull_request: branches: [ "main" ] paths: - '**.js' - '**.jsx' - '**.ts' - '**.tsx' - '**.mjs' - '**.cjs' - 'package.json' # Uncomment when JS/TS code is added: # schedule: # - cron: '0 0 * * 1' schedule: - cron: '0 0 * * 1' workflow_dispatch: jobs: analyze: runs-on: ubuntu-latest # Only run if there are JS/TS files in the repo if: ${{ github.event_name == 'workflow_dispatch' || github.event_name == 'schedule' || github.event_name == 'push' || github.event_name == 'pull_request' }} permissions: actions: read contents: read security-events: write strategy: fail-fast: false matrix: language: [ 'javascript-typescript' ] steps: - uses: actions/checkout@v6 - name: Check for JS/TS files id: check-files run: | if find . -type f \( -name "*.js" -o -name "*.jsx" -o -name "*.ts" -o -name "*.tsx" -o -name "*.mjs" -o -name "*.cjs" \) | grep -q .; then echo "has_code=true" >> $GITHUB_OUTPUT else echo "has_code=false" >> $GITHUB_OUTPUT fi - uses: github/codeql-action/init@v4 if: steps.check-files.outputs.has_code == 'true' with: languages: ${{ matrix.language }} queries: security-extended,security-and-quality - uses: github/codeql-action/autobuild@v4 if: steps.check-files.outputs.has_code == 'true' - uses: github/codeql-action/analyze@v4 if: steps.check-files.outputs.has_code == 'true' with: category: "/language:${{matrix.language}}" - name: Skip notification if: steps.check-files.outputs.has_code == 'false' run: echo "No JavaScript/TypeScript files found. Skipping CodeQL analysis."