Security Scan #11

	name: Security Scan

	on:
	schedule:
	# Run security scan daily at 00:00 UTC
	- cron: '0 0 * * *'
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]

	jobs:
	security-scan:
	name: Security Vulnerability Scan
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0

	- name: Setup Node.js
	uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
	with:
	node-version: '20.x'
	cache: 'npm'

	- name: Install dependencies
	run: npm ci

	- name: Run npm audit
	run: npm audit --audit-level=moderate

	- name: Run npm audit fix
	run: npm audit fix --dry-run

	- name: Check for outdated dependencies
	run: npm outdated
	continue-on-error: true

	codeql-analysis:
	name: CodeQL Analysis
	runs-on: ubuntu-latest
	permissions:
	actions: read
	contents: read
	security-events: write

	steps:
	- name: Checkout code
	uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0

	- name: Initialize CodeQL
	uses: github/codeql-action/init@5d5cd550d3e189c569da8f16ea8de2d821c9bf7a # v3.31.2
	with:
	languages: javascript

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@5d5cd550d3e189c569da8f16ea8de2d821c9bf7a # v3.31.2

Provide feedback