Skip to content

Chore(deps-dev): bump vite from 5.4.21 to 8.0.8 in /frontend in the npm_and_yarn group across 1 directory #301

Chore(deps-dev): bump vite from 5.4.21 to 8.0.8 in /frontend in the npm_and_yarn group across 1 directory

Chore(deps-dev): bump vite from 5.4.21 to 8.0.8 in /frontend in the npm_and_yarn group across 1 directory #301

Workflow file for this run

name: CodeQL
on:
push:
branches: ["main"]
pull_request:
branches: ["main"]
schedule:
- cron: "17 2 * * 1" # weekly (Mon)
workflow_dispatch:
permissions:
contents: read
actions: read
security-events: write
jobs:
analyze:
name: Analyze (CodeQL)
runs-on: ubuntu-latest
timeout-minutes: 60
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Initialize CodeQL
uses: github/codeql-action/init@v4
with:
languages: python
- name: Autobuild
uses: github/codeql-action/autobuild@v4
- name: Perform CodeQL Analysis (no Code Scanning upload)
uses: github/codeql-action/analyze@v4
with:
upload: never
output: codeql-sarif
upload-database: false
wait-for-processing: false
- name: Find CodeQL SARIF
id: codeql_sarif
if: ${{ always() }}
run: |
set -euo pipefail
echo "== ls codeql-sarif =="; ls -la codeql-sarif || true
f="$(find codeql-sarif -type f \( -name '*.sarif' -o -name '*.sarif.json' \) -print 2>/dev/null | head -n 1 || true)"
if [ -z "$f" ]; then
f="$(find . -maxdepth 8 -type f \( -name '*.sarif' -o -name '*.sarif.json' \) -print 2>/dev/null | head -n 1 || true)"
fi
echo "file=$f" >> "$GITHUB_OUTPUT"
if [ -n "$f" ]; then
echo "Found SARIF: $f"
else
echo "WARN: No SARIF found" >&2
fi
- name: Upload SARIF to Code Scanning (best effort)
if: ${{ always() && steps.codeql_sarif.outputs.file != '' }}
continue-on-error: true
uses: github/codeql-action/upload-sarif@v4
with:
sarif_file: ${{ steps.codeql_sarif.outputs.file }}