Enable GitHub CodeQL scanning #19
Description
Summary
Configure GitHub’s CodeQL code scanning for this repository to analyze the JavaScript/TypeScript codebase, catch common security issues early, and surface findings in the repo Security → Code scanning alerts.
Goals
- Enable CodeQL analysis for JS/TS to detect common vulnerabilities and insecure patterns.
- Run analysis automatically via GitHub Actions and publish results to the Security tab.
- Keep configuration lightweight and maintainable for an OSS repo.
Non-Goals
- Custom CodeQL queries on day one.
- Scanning non-JS/TS languages unless required.
- Treating CodeQL as a replacement for unit tests/linting.