Publish #22834

	name: CodeQL (JavaScript)

	on:
	push:
	branches:
	- main
	- release-*
	pull_request:
	branches:
	- main
	- release-*
	merge_group:
	branches:
	- main
	schedule:
	- cron: '19 8 * * 1'

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.number \|\| github.ref }}
	cancel-in-progress: true

	jobs:
	skip-check:
	name: Skip check
	continue-on-error: true
	runs-on: ubuntu-latest
	timeout-minutes: 10
	outputs:
	should_skip: ${{ steps.skip-check.outputs.should_skip }}
	permissions:
	actions: write
	contents: read
	steps:
	- id: skip-check
	uses: fkirc/skip-duplicate-actions@f75f66ce1886f00957d99748a42c724f4330bdcf # v5.3.1
	with:
	do_not_skip: '["schedule", "workflow_dispatch"]'
	paths: \|-
	[
	".github/workflows/codeql-analysis-js.yml",
	"ui/**"
	]
	skip_after_successful_duplicate: false

	analyze:
	name: Analyze
	needs: skip-check
	if: ${{ needs.skip-check.outputs.should_skip != 'true' }}
	runs-on: ubuntu-latest
	timeout-minutes: 15
	permissions:
	actions: read
	contents: read
	security-events: write

	strategy:
	fail-fast: false
	matrix:
	language: [ 'javascript' ]

	steps:
	- name: Checkout repository
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Initialize CodeQL
	uses: github/codeql-action/init@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
	with:
	languages: ${{ matrix.language }}

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6

Provide feedback