langchain-ai/deepagentsjs
1
0
Fork 0
mirror of https://github.com/langchain-ai/deepagentsjs.git synced 2026-08-24 22:11:26 -04:00
Code Issues 42 Packages Projects Releases 10 Wiki Activity

[PR #366] [CLOSED] ci: add CodeQL security scanning workflow #400

New Issue
Closed
opened 2026-06-05 17:22:57 -04:00 by yindo · 0 comments
yindo commented 2026-06-05 17:22:57 -04:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/langchain-ai/deepagentsjs/pull/366
Author: @jkennedyvz
Created: 3/25/2026
Status: ❌ Closed

Base: main ← Head: ci/add-codeql-scanning

📝 Commits (2)

  • f754656 ci: add CodeQL security scanning workflow
  • 7d6dd63 fix: use valid codeql-action version SHA

📊 Changes

1 file changed (+53 additions, -0 deletions)

View changed files

➕ .github/workflows/codeql.yml (+53 -0)

📄 Description

Adds automated security scanning via GitHub's CodeQL to detect vulnerabilities in TypeScript/JavaScript code.

Changes:

  • New CodeQL workflow (.github/workflows/codeql.yml) with:
    • Triggers on push to main, pull requests, and weekly schedule
    • Scans with security-extended query suite (comprehensive security analysis)
    • Builds project for semantic analysis
    • Reports findings as security-events

Security Benefits:

  • Identifies common vulnerabilities (injection, XSS, SQL injection, etc.)
  • Prevents security regressions on every PR
  • Weekly scans catch newly discovered vulnerability patterns
  • Complies with GitHub security best practices for source code repos

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/langchain-ai/deepagentsjs/pull/366 **Author:** [@jkennedyvz](https://github.com/jkennedyvz) **Created:** 3/25/2026 **Status:** ❌ Closed **Base:** `main` ← **Head:** `ci/add-codeql-scanning` --- ### 📝 Commits (2) - [`f754656`](https://github.com/langchain-ai/deepagentsjs/commit/f754656e266bf4c537bedbebef00dad446aaf586) ci: add CodeQL security scanning workflow - [`7d6dd63`](https://github.com/langchain-ai/deepagentsjs/commit/7d6dd6323fd12a80d14ee73dc4435dec263d2d60) fix: use valid codeql-action version SHA ### 📊 Changes **1 file changed** (+53 additions, -0 deletions) <details> <summary>View changed files</summary> ➕ `.github/workflows/codeql.yml` (+53 -0) </details> ### 📄 Description Adds automated security scanning via GitHub's CodeQL to detect vulnerabilities in TypeScript/JavaScript code. Changes: - New CodeQL workflow (.github/workflows/codeql.yml) with: - Triggers on push to main, pull requests, and weekly schedule - Scans with security-extended query suite (comprehensive security analysis) - Builds project for semantic analysis - Reports findings as security-events Security Benefits: - Identifies common vulnerabilities (injection, XSS, SQL injection, etc.) - Prevents security regressions on every PR - Weekly scans catch newly discovered vulnerability patterns - Complies with GitHub security best practices for source code repos --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-06-05 17:22:57 -04:00
yindo closed this issue 2026-06-05 17:22:57 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
enhancement
help wanted
needs-response
pull-request
Mirrored from GitHub Pull Request
 stale
triage: high-impact
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langchain-ai/deepagentsjs#400
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?