CodeQL #8

	name: 'CodeQL'

	permissions:
	security-events: write
	actions: read
	contents: read

	on:
	push:
	branches:
	- main
	- master
	pull_request:
	branches:
	- main
	- master
	schedule:
	# ┌───────────── minute (0 - 59)
	# │ ┌───────────── hour (0 - 23)
	# │ │ ┌───────────── day of the month (1 - 31)
	# │ │ │ ┌───────────── month (1 - 12 or JAN-DEC)
	# │ │ │ │ ┌───────────── day of the week (0 - 6 or SUN-SAT)
	# │ │ │ │ │
	# * * * * *
	- cron: '30 1 * * 0' # Every Sunday at 01:30 UTC

	jobs:
	analyze:
	uses: pixpilot/dev-config/.github/workflows/codeql-analysis.yml@main
	with:
	config-file: .github/codeql/codeql-config.yml
	# -------------------------------------------------------------
	# Alternative: Reusable workflow for code scanning
	# -------------------------------------------------------------
	# Use this ONLY if your repo is private and you do NOT have GitHub Enterprise.
	# The official CodeQL workflow (see above) is always preferred for security and
	# integration with GitHub Security UI.
	#
	# jobs:
	# code-analysis:
	# uses: pixpilot/dev-config/.github/workflows/codeql-issue-maker.yml@main
	# with:
	# language: 'javascript' # or your target language
	# secrets:
	# token: ${{ secrets.GITHUB_TOKEN }}

Provide feedback