feature/merge-world-locator-into-map #67

	name: Security

	on:
	pull_request:
	branches: [ main ]
	push:
	branches: [ main ]
	schedule:
	- cron: '25 16 * * 4'

	jobs:
	codeql:
	name: CodeQL
	permissions:
	packages: read
	security-events: write
	runs-on: ubuntu-latest

	steps:
	- name: Repository checkout
	uses: actions/[email protected]

	- name: Node.js setup
	uses: actions/[email protected]
	with:
	cache: npm
	cache-dependency-path: package-lock.json
	node-version: 18.20.4

	- name: Dependencies installation
	run: npm ci

	- name: Test
	run: npm test

	- name: Initialization
	uses: github/codeql-action/[email protected]
	with:
	languages: 'javascript-typescript'

	- name: Analysis
	uses: github/codeql-action/[email protected]

	- name: Results upload
	uses: github/codeql-action/[email protected]
	with:
	category: codeql-analysis

	snyk:
	name: Snyk
	permissions:
	security-events: write
	runs-on: ubuntu-latest

	steps:
	- name: Repository checkout
	uses: actions/[email protected]

	- name: Node.js setup
	uses: actions/[email protected]
	with:
	cache: npm
	cache-dependency-path: package-lock.json
	node-version: 18.20.4

	- name: Dependencies installation
	run: npm ci

	- name: Analysis
	continue-on-error: true
	env:
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
	uses: snyk/actions/[email protected]
	with:
	args: --sarif-file-output=snyk.sarif

	- name: Results upload
	uses: github/codeql-action/[email protected]
	with:
	category: snyk-analysis
	sarif_file: snyk.sarif

Provide feedback