Skip to content

Security: JS CodeQL #65

Security: JS CodeQL

Security: JS CodeQL #65

name: "Security: JS CodeQL"
on:
workflow_dispatch:
schedule:
- cron: "30 23 * * *"
jobs:
build-js:
name: Build JS packages
secrets: inherit
uses: ./.github/workflows/tests-build-js.yml
js-codeql:

Check failure on line 14 in .github/workflows/security-audit-js-codeql.yml

View workflow run for this annotation

GitHub Actions / Security: JS CodeQL

Invalid workflow file

The workflow is not valid. .github/workflows/security-audit-js-codeql.yml (Line: 14, Col: 3): Error calling workflow 'bfoss765/platform/.github/workflows/tests-codeql.yml@8b466abc74ee540796c87c6fb6dfa3af2a92c5d1'. The nested job 'codeql' is requesting 'actions: read, security-events: write, id-token: write', but is only allowed 'actions: none, security-events: none, id-token: none'.
name: JS code security audit
needs: build-js
secrets: inherit
uses: ./.github/workflows/tests-codeql.yml