Skip to content

Commit 8cb55c9

Browse files
hyperpolymathclaude
andcommitted
fix(ci): add language: actions to codeql.yml matrix (WF020)
Adds the actions extractor alongside javascript-typescript so GitHub Actions workflow YAML is scanned for CI/CD weaknesses (injection, permission issues). Fixes Hypatia WF020 codeql_missing_actions_language. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent eaca5a7 commit 8cb55c9

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

.github/workflows/codeql.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,8 @@ jobs:
3333
include:
3434
- language: javascript-typescript
3535
build-mode: none
36+
- language: actions
37+
build-mode: none
3638

3739
steps:
3840
- name: Checkout

0 commit comments

Comments
 (0)