deps(transactional)(deps): bump modernc.org/sqlite from 1.50.0 to 1.54.0 in /transactional #36

	name: CodeQL

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	schedule:
	- cron: "0 6 * * 1" # Mondays 06:00 UTC

	permissions:
	actions: read
	contents: read
	security-events: write

	jobs:
	analyze:
	name: analyze (go)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-go@v5
	with:
	go-version: "1.25"
	- uses: github/codeql-action/init@v3
	with:
	languages: go
	queries: security-and-quality
	- name: Build all modules (manual mode)
	# CodeQL's autobuild does not understand Go workspaces — we drive
	# the build manually so it traces every module rather than only
	# the one at the workspace root.
	run: \|
	set -euo pipefail
	while IFS= read -r m; do
	dir=$(dirname "$m")
	(cd "$dir" && go build ./...)
	done < <(find . -name go.mod -not -path './/vendor/' \| sort)
	- uses: github/codeql-action/analyze@v3
	with:
	category: "/language:go"

Navigation Menu