build(deps): bump the npm-dependencies group across 2 directories with 37 updates #111

	# CodeQL; thin caller of the org-wide reusable analysis (bymaxone/.github).
	#
	# The whole definition, including the public-repository gate that decides
	# whether scanning may run at all, lives in bymaxone/.github so the licensing
	# rule exists once rather than in every repository that copies it.
	name: CodeQL

	on:
	push:
	branches: [main]
	pull_request:
	schedule:
	- cron: '0 3 * * 0'

	# Workflow-level floor, matching every other workflow here. The calling job
	# below declares its own set, which replaces this one rather than being capped
	# by it.
	permissions:
	contents: read

	jobs:
	# Job id is the convention across the org: it prefixes the reported check,
	# so every repo shows `codeql / Analyze (<language>)` under the same name.
	codeql:
	# Declared on the calling job, which is the only place that reaches the
	# called workflow: a job that sets its own permissions replaces the
	# workflow-level set rather than intersecting with it, and a called
	# workflow cannot be granted more than its caller holds.
	permissions:
	contents: read
	security-events: write
	actions: read
	uses: bymaxone/.github/.github/workflows/codeql.yml@v1

Navigation Menu