From f9ab0ed8cea8b9868283adab51e926527e60bd2e Mon Sep 17 00:00:00 2001 From: miguelgual2003 Date: Fri, 16 Jan 2026 20:24:11 +0100 Subject: [PATCH] Implement CodeQL Security Scan in workflow Added CodeQL security scan workflow for Python. --- .github/workflows/main.yml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 8e1adf7a29..9b2ed69188 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -75,3 +75,27 @@ jobs: run: pylinkvalidate.py -P http://localhost:8000/ - run: echo "Done" + + codeql: + name: CodeQL Security Scan + runs-on: ubuntu-latest + + permissions: + security-events: write + contents: read + + steps: + - name: Checkout code + uses: actions/checkout@v4 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v3 + with: + languages: python + queries: security-and-quality + + # Para Python NO hace falta build ni dependencias + # CodeQL analiza el código fuente directamente + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v3