build(deps): bump crazy-max/.github

Bumps [crazy-max/.github](https://github.com/crazy-max/.github) from a94383ec9e125b23907fb6fcebf7ff87964595e5 to 20ef82212dc54bab5749f5e05576ca6d3c8a5773. - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](a94383ec9e...20ef82212d) --- updated-dependencies: - dependency-name: crazy-max/.github dependency-version: 20ef82212dc54bab5749f5e05576ca6d3c8a5773 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #497 from crazy-max/codeql
2026-03-25 09:19:17 +00:00 · 2026-03-25 04:42:19 +00:00 · 2026-03-20 16:57:43 +01:00 · 2026-03-20 11:56:47 +01:00 · 2026-03-16 12:46:49 +01:00 · 2026-03-16 04:42:17 +00:00
3 changed files with 47 additions and 2 deletions
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -485,7 +485,7 @@ jobs:
        uses: actions/checkout@v6
      -
        name: Install k3s
-        uses: crazy-max/.github/.github/actions/install-k3s@a94383ec9e125b23907fb6fcebf7ff87964595e5
+        uses: crazy-max/.github/.github/actions/install-k3s@20ef82212dc54bab5749f5e05576ca6d3c8a5773
      -
        name: Set up Docker Buildx
        id: buildx
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,45 @@
+name: codeql
+
+on:
+  push:
+    branches:
+      - 'master'
+      - 'releases/v*'
+  pull_request:
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+env:
+  NODE_VERSION: "24"
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v6
+      -
+        name: Enable corepack
+        run: |
+          corepack enable
+          yarn --version
+      -
+        name: Set up Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+      -
+        name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
+        with:
+          languages: javascript-typescript
+          build-mode: none
+      -
+        name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v4
+        with:
+          category: "/language:javascript-typescript"
--- a/.github/workflows/update-dist.yml
+++ b/.github/workflows/update-dist.yml
@@ -14,7 +14,7 @@ jobs:
      -
        name: GitHub auth token from GitHub App
        id: docker-read-app
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
        with:
          app-id: ${{ secrets.GHACTIONS_REPO_WRITE_APP_ID }}
          private-key: ${{ secrets.GHACTIONS_REPO_WRITE_APP_PRIVATE_KEY }}
Author	SHA1	Message	Date
dependabot[bot]	a5d4c2358f	build(deps): bump crazy-max/.github Bumps [crazy-max/.github](https://github.com/crazy-max/.github) from a94383ec9e125b23907fb6fcebf7ff87964595e5 to 20ef82212dc54bab5749f5e05576ca6d3c8a5773. - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](`a94383ec9e...20ef82212d`) --- updated-dependencies: - dependency-name: crazy-max/.github dependency-version: 20ef82212dc54bab5749f5e05576ca6d3c8a5773 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-25 04:42:19 +00:00
CrazyMax	d91f340399	Merge pull request #497 from crazy-max/codeql ci: enable SAST scanning with CodeQL	2026-03-20 16:57:43 +01:00
CrazyMax	3da2ceadbf	ci: enable SAST scanning with CodeQL Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-20 11:56:47 +01:00
CrazyMax	8016837eba	Merge pull request #493 from docker/dependabot/github_actions/actions/create-github-app-token-3 build(deps): bump actions/create-github-app-token from 2 to 3	2026-03-16 12:46:49 +01:00
dependabot[bot]	f4d39becb2	build(deps): bump actions/create-github-app-token from 2 to 3 Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2 to 3. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](https://github.com/actions/create-github-app-token/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-16 04:42:17 +00:00