Skip to content

Commit eacaf86

Browse files
authored
Merge pull request #203 from codeunia-dev/production-readiness-improvements
FIX: Update CodeQL to v3, Node.js to v20, and add security permissions
2 parents 45c71bd + 9ebd1dd commit eacaf86

File tree

1 file changed

+8
-3
lines changed

1 file changed

+8
-3
lines changed

.github/workflows/ci-cd.yml

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,13 @@ on:
66
pull_request:
77
branches: [ main, develop ]
88

9+
permissions:
10+
contents: read
11+
security-events: write
12+
actions: read
13+
914
env:
10-
NODE_VERSION: '18'
15+
NODE_VERSION: '20'
1116
PUPPETEER_SKIP_CHROMIUM_DOWNLOAD: true
1217

1318
jobs:
@@ -135,12 +140,12 @@ jobs:
135140

136141
# CodeQL Analysis
137142
- name: Initialize CodeQL
138-
uses: github/codeql-action/init@v2
143+
uses: github/codeql-action/init@v3
139144
with:
140145
languages: javascript
141146

142147
- name: Perform CodeQL Analysis
143-
uses: github/codeql-action/analyze@v2
148+
uses: github/codeql-action/analyze@v3
144149

145150
# Custom Security Tests
146151
- name: Run security tests

0 commit comments

Comments
 (0)