mcp-toolz

name: CodeQL "on": push: branches: [main] pull_request: branches: [main] schedule: # Run every Monday at 8:00 UTC - cron: '0 8 * * 1' # Declare minimal permissions for all jobs permissions: read-all jobs: analyze: name: Analyze (${{ matrix.language }}) runs-on: ubuntu-latest permissions: actions: read contents: read security-events: write strategy: fail-fast: false matrix: language: ['python', 'actions'] steps: - name: Checkout Repository uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v5 - name: Initialize CodeQL uses: github/codeql-action/init@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4 with: languages: ${{ matrix.language }} # Use default queries plus security-extended for comprehensive analysis queries: security-extended - name: Autobuild uses: github/codeql-action/autobuild@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4 - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4 with: category: "/language:${{ matrix.language }}"