mcp-adr-analysis-server

name: Security Scanning Pipeline on: push: branches: [main] pull_request: branches: [main] schedule: - cron: '0 9 * * 1' # Weekly Monday 9 AM UTC jobs: security-scan: runs-on: ubuntu-latest permissions: security-events: write contents: read actions: read steps: - uses: actions/checkout@v5 - name: Setup Node.js uses: actions/setup-node@v5 with: node-version: '20' cache: 'npm' - name: Install dependencies run: npm ci - name: Run security audit run: npm audit --audit-level=moderate - name: Initialize CodeQL uses: github/codeql-action/init@v4 with: languages: javascript - name: Autobuild uses: github/codeql-action/autobuild@v4 - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v4 - name: Dependency Review uses: actions/dependency-review-action@v4 if: github.event_name == 'pull_request'