Skip to content

Commit 9ebd1dd

Browse files
author
Deepak Pandey
committed
FIX: Update CodeQL to v3, Node.js to v20, and add security permissions
- Updated CodeQL actions from v2 to v3 to fix deprecation warnings - Updated Node.js version from 18 to 20 to fix engine compatibility warnings - Added security-events:write permission for CodeQL to upload results - Added contents:read and actions:read permissions for proper workflow execution
1 parent eb3ce8b commit 9ebd1dd

File tree

1 file changed

+8
-3
lines changed

1 file changed

+8
-3
lines changed

.github/workflows/ci-cd.yml

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,13 @@ on:
66
pull_request:
77
branches: [ main, develop ]
88

9+
permissions:
10+
contents: read
11+
security-events: write
12+
actions: read
13+
914
env:
10-
NODE_VERSION: '18'
15+
NODE_VERSION: '20'
1116
PUPPETEER_SKIP_CHROMIUM_DOWNLOAD: true
1217

1318
jobs:
@@ -135,12 +140,12 @@ jobs:
135140

136141
# CodeQL Analysis
137142
- name: Initialize CodeQL
138-
uses: github/codeql-action/init@v2
143+
uses: github/codeql-action/init@v3
139144
with:
140145
languages: javascript
141146

142147
- name: Perform CodeQL Analysis
143-
uses: github/codeql-action/analyze@v2
148+
uses: github/codeql-action/analyze@v3
144149

145150
# Custom Security Tests
146151
- name: Run security tests

0 commit comments

Comments
 (0)