chore(chart): add values.schema.json to catch typo'd/unknown top-level keys #293

	name: CodeQL

	# Linguist mis-classifies this repo (Helm templates dominate, runner/ Go code
	# is hidden), so default-setup CodeQL doesn't see Go. Configure it explicitly.
	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	schedule:
	- cron: '24 7 * * 1' # weekly, Monday

	permissions: read-all

	jobs:
	analyze:
	name: Analyze (${{ matrix.language }})
	runs-on: ubuntu-latest
	timeout-minutes: 30
	permissions:
	security-events: write
	packages: read
	actions: read
	contents: read
	strategy:
	fail-fast: false
	matrix:
	include:
	- language: go
	build-mode: manual
	- language: actions
	build-mode: none

	steps:
	- name: Checkout
	uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
	with:
	persist-credentials: false

	- name: Setup Go
	if: matrix.language == 'go'
	uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
	with:
	go-version-file: runner/go.mod
	cache: true
	cache-dependency-path: runner/go.sum

	- name: Initialize CodeQL
	uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3
	with:
	languages: ${{ matrix.language }}
	build-mode: ${{ matrix.build-mode }}

	- name: Build Go (manual)
	if: matrix.language == 'go'
	working-directory: runner
	run: go build ./...

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3
	with:
	category: "/language:${{ matrix.language }}"

Navigation Menu