Repository navigation

Merge pull request #1383 from danfiedler-msft/danfiedler/pin-actions #245

	name: Security Scan

	on:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main
	schedule:
	# Weekly scan every Monday at 06:00 UTC
	- cron: '0 6 * * 1'

	permissions:
	contents: read

	jobs:
	codeql:
	name: CodeQL Analysis
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	actions: read
	contents: read
	strategy:
	fail-fast: false
	matrix:
	language:
	- javascript-typescript
	- python
	steps:
	- name: Checkout repository
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

	- name: Initialize CodeQL
	uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
	with:
	languages: ${{ matrix.language }}

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
	with:
	category: "/language:${{ matrix.language }}"

	dependency-review:
	name: Dependency Review
	runs-on: ubuntu-latest
	# Dependency review only runs on pull requests.
	if: github.event_name == 'pull_request'
	permissions:
	contents: read
	pull-requests: write
	steps:
	- name: Checkout repository
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

	- name: Dependency Review
	uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
	with:
	comment-summary-in-pr: on-failure