James MaesandCodex
06f083af39
Generate the GUI-only AppKit foundation, lock published dependencies and record the Windows feature requirements against the pinned original. The greeting is still scaffold content; no Markdown viewer or release is claimed. Validation: zero-warning solution build; 20 core tests; 100% core coverage; formatting and documentation checks. Co-Authored-By: Codex (GPT-6) <noreply@openai.com> Signed-off-by: James Maes <jmaes@dmdbrands.com>
32 lines
938 B
YAML
32 lines
938 B
YAML
# CodeQL static analysis (K22-CI-22): security-extended queries for C# (a manual x64
|
|
# build of the solution) and for the workflows themselves, blocking high severity.
|
|
name: codeql
|
|
|
|
on:
|
|
pull_request:
|
|
push:
|
|
branches: [main]
|
|
schedule:
|
|
- cron: "41 6 * * 1"
|
|
|
|
workflow_call:
|
|
|
|
permissions: {}
|
|
|
|
concurrency:
|
|
group: codeql-${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
|
|
|
|
jobs:
|
|
codeql:
|
|
uses: KofTwentyTwo/standards/.github/workflows/codeql.yml@fdf5ed029603c938615a32b1beca3628b8787945 # v0.1.2
|
|
permissions:
|
|
contents: read # check out the code
|
|
security-events: write # upload CodeQL results to code scanning
|
|
with:
|
|
languages: '["csharp", "actions", "javascript-typescript"]'
|
|
build-mode: manual
|
|
build-command: dotnet build MarkdownViewr.Windows.slnx -p:Platform=x64
|
|
runs-on: windows-latest
|
|
setup-dotnet: true
|