chore: added CodeQL workflow

[artembelik]

Summary by CodeRabbit

• Chores
  • Added automated CodeQL security analysis for Actions and JavaScript/TypeScript code.
  • Security scans now run on code changes, pull requests, scheduled intervals, and manual requests.
  • Configured extended security checks while excluding vendored dependencies from analysis.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 8e61fabd-51e0-47d8-b7b0-5cd8c69ba946

📥 Commits

Reviewing files that changed from the base of the PR and between e32001f and 4075524.

📒 Files selected for processing (2)

• .github/codeql/codeql-config.yml
• .github/workflows/codeql.yml

---

📝 Walkthrough

Walkthrough

The pull request adds CodeQL configuration and a GitHub Actions workflow. The workflow analyzes Actions and JavaScript/TypeScript code on repository events, a weekly schedule, and manual dispatch.

Changes

CodeQL security scanning

Layer / File(s)	Summary
CodeQL analysis workflow .github/codeql/codeql-config.yml, .github/workflows/codeql.yml	The configuration enables security-extended queries and excludes .yarn/**. The workflow defines analysis triggers, permissions, language matrix entries, checkout, and pinned CodeQL steps with no-build mode.

Estimated code review effort: 2 (Simple) | ~10 minutes

Sequence Diagram(s)

sequenceDiagram
  participant GitHubEvent
  participant CodeQLWorkflow
  participant CodeQLActions
  GitHubEvent->>CodeQLWorkflow: Trigger analysis
  CodeQLWorkflow->>CodeQLActions: Initialize with repository configuration
  CodeQLActions->>CodeQLActions: Analyze Actions and JavaScript/TypeScript without a build

Loading

Suggested reviewers: lskramarov, nikgurev, copilot

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the primary change: adding a CodeQL workflow and configuration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/codeql

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[github-actions]

Visit the preview URL for this PR (updated for commit 4075524):

https://data-grid-next--data-grid-pr-206-p17bhes3.web.app

_{(expires Fri, 07 Aug 2026 10:37:58 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

_{Sign: b9d49913f5b5988e9af8690a8b37f16143707448}

[Copilot]

Pull request overview

Adds GitHub CodeQL code scanning to this Nx/Yarn monorepo so security and quality queries run automatically on main and on PRs, plus on a weekly schedule.

Changes:

• Introduced a new CodeQL GitHub Actions workflow that analyzes both GitHub Actions workflows and JavaScript/TypeScript.
• Added a repository-specific CodeQL configuration enabling security-extended queries and ignoring vendored Yarn files under .yarn/.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/codeql.yml	Adds the CodeQL workflow with matrix scanning (actions, javascript-typescript) and appropriate permissions.
.github/codeql/codeql-config.yml	Adds CodeQL configuration (extended security queries + .yarn/** ignore).