Feat: implement Shift left #3

	# Define the name of the workflow
	name: "CodeQL-Advanced"

	# Define when the workflow should be triggered (on push to a specific branch and pull requests to the master branch)
	on:
	push:
	branches: [ "master" ]
	pull_request:
	branches: [ "master" ]

	# Define the jobs that will be executed as part of the workflow
	jobs:
	analyze:
	name: Analyze
	runs-on:
	group: ncats-onprem-internal-runners
	timeout-minutes: ${{ (matrix.language == 'swift' && 120) \|\| 360 }}
	permissions:
	security-events: write
	actions: read
	contents: read

	# Define the matrix strategy for parallel runs with different languages
	strategy:
	fail-fast: false
	matrix:
	language: [ 'javascript-typescript' ]

	steps:
	# Step 1: Checkout repository
	- name: Checkout repository
	uses: actions/checkout@v4

	# Step 2: Initialize CodeQL for scanning
	- name: Initialize CodeQL
	uses: github/codeql-action/init@v3
	with:
	languages: ${{ matrix.language }}

	# Step 3: Autobuild the code.
	- name: Autobuild
	uses: github/codeql-action/autobuild@v3

	# Step 4: Analyzes the code using CodeQL, with the analysis category based on the matrix language.
	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v3
	with:
	category: "/language:${{matrix.language}}"

	# Step 5: Generate Security Report
	- name: Generate Security Report
	uses: rsdmike/[email protected]
	with:
	token: ${{ secrets.GITHUB_TOKEN }}

	# Step 6: Uploads artifacts (PDF reports) generated during the workflow to download.
	- name: Upload Artifacts
	uses: actions/upload-artifact@v4
	with:
	name: reports
	path: ./*.pdf

Provide feedback