lint: Improve CodeQL analysis.

northwood-labs · Oct 27, 2023 · 15321a7 · 15321a7
1 parent 5c8eb0f
commit 15321a7
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -20,6 +20,7 @@ jobs:
     permissions:
       actions: read
       contents: read
+      id-token: write
       security-events: write
 
     strategy:
@@ -48,3 +49,6 @@ jobs:
         uses: github/codeql-action/analyze@74483a38d39275f33fcff5f35b679b5ca4a26a99 # v2.22.5
         with:
           category: /language:${{matrix.language}}
+          output: codeql.sarif
+          cleanup-level: brutal
+          add-snippets: 'true'