ci: centralize QBit source scanning

Co-Authored-By: Codex <noreply@openai.com>
2026-10-21 10:20:06 -05:00
1 changed files with 23 additions and 0 deletions
@@ -0,0 +1,23 @@
 name: CodeQL
 'on':
  push:
    branches:
    - main
    - develop
    - release/**
    - hotfix/**
  pull_request: {}
  schedule:
  - cron: 41 16 * * 0
  workflow_dispatch: {}
 permissions:
  contents: read
  actions: read
  security-events: write
  packages: read
 concurrency:
  group: codeql-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 jobs:
  analyze:
    uses: QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml@c288a8864fe9054f68410e1d78f5863aea4c4d22