chore: update config

PatrickJS · PatrickJS · commit cb15ea99506a · 2024-10-25T23:19:12.000-07:00
diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml
@@ -21,6 +21,8 @@ paths-ignore:
 queries:
   - uses: security-extended
   - uses: security-and-quality
+  - uses: codeql/javascript-queries/Security
+  - uses: codeql/typescript-queries/Security
 
 query-filters:
   - exclude:
@@ -32,36 +34,30 @@ query-filters:
         - security
         - correctness
 
-output:
-  sarif:
-    category: "/language:javascript-typescript"
-    level: "error"
-    add-snippets: true
-
 database:
   analyze-builtin-pretrained-model: true
-
-trap:
-  typescript:
-    enabled: true
-    extractor:
-      typescript:
-        experimental:
-          type-tracking: true
-        parse-error-recovery: true
-        skip-parsing-on-error: false
-        max-parse-errors: 10
+  max-disk: 1024
+  max-ram: 4096
 
 extraction:
   javascript:
     index-typescript: true
-    typescript-tracing: true
     typescript:
-      diagnostic-mode: true
-      experimental-features: true
+      version: 5.x
+      features:
+        - decorators
+        - modules
+      dependencies:
+        typescript: '*'
+    source-type: module
+    file-types:
+      - .js
+      - .ts
+      - .mts
+      - .cts
 
-diagnostics:
-  debug:
-    - typescript-extractor
-    - trap-errors
-  export-diagnostics: true
+output:
+  sarif:
+    category: "/language:javascript-typescript"
+    level: "error"
+    add-snippets: true
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -3,8 +3,16 @@ name: "CodeQL Security Scan"
 on:
   push:
     branches: [ "main" ]
+    paths:
+      - 'packages/**'
+      - '.github/workflows/codeql.yml'
+      - '.github/codeql/**'
   pull_request:
     branches: [ "main" ]
+    paths:
+      - 'packages/**'
+      - '.github/workflows/codeql.yml'
+      - '.github/codeql/**'
   schedule:
     - cron: '30 1 * * 0'  # Runs at 01:30 UTC every Sunday
 
@@ -34,21 +42,19 @@ jobs:
       uses: actions/checkout@v4
 
     - name: Setup Deno
-      uses: denoland/setup-deno@v1
+      uses: denoland/setup-deno@v2
       with:
-        deno-version: v1.x
+        deno-version: v1`.x
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
         config-file: .github/codeql/codeql-config.yml
-        queries: +security-extended,security-and-quality
-        setup-python-dependencies: false
+        queries: security-extended,security-and-quality
+        packs: +codeql/javascript-queries:recommended
         tools: latest
-        init: |
-          config:
-            disable-default-queries: true
+        debug: true
 
     - name: Autobuild
       uses: github/codeql-action/autobuild@v3
@@ -60,4 +66,4 @@ jobs:
         upload: true
         output: sarif-results
         ram: 4096
-        threads: auto
+        threads: 4
