Enable sensible CodeQL scanning

[Copilot]

Summary

Enable CodeQL for this repository with a dedicated workflow and a scoped configuration that keeps scans useful and efficient.

Changes

• Add .github/workflows/codeql.yml to run CodeQL on:
  • pull requests
  • pushes to devel
  • merge queue (merge_group)
  • weekly schedule
  • manual dispatch
• Configure CodeQL matrix for:
  • javascript-typescript
• Use build-mode: none
• Add .github/codeql/codeql-config.yml with:
  • security-and-quality query suite
  • pragmatic path exclusions for legacy, generated, and test-heavy folders (frontend-old, e2e, translation, .ops, coverage/dist/node_modules, and selected test/fixture directories)
• Follow-up fix from PR feedback:
  • remove unsupported php language from the CodeQL matrix so workflow initialization succeeds on GitHub Actions

Validation

• YAML syntax validated locally for both new files
• Parallel validation completed:
  • Code Review: no comments
  • CodeQL Security Scan: no alerts

[BacLuc]

Computer says no:
Did not recognize the following languages: php

https://github.com/ecamp/ecamp3/actions/runs/24598249050/job/71940243542?pr=9519

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[manuelmeister]

@copilot the run hat errors

[manuelmeister]

@copilot the run failed: https://github.com/ecamp/ecamp3/actions/runs/24598249050/job/71940243542?pr=9519

Fix this

[Copilot]

Fixed in 87d97d9 by removing unsupported php from the CodeQL matrix. That run failure is resolved. No UI changes were made, so there is no UI screenshot.

[Copilot]

Computer says no:
Did not recognize the following languages: php

...

Fixed in 87d97d9. I removed php from the CodeQL language matrix because this runner’s CodeQL bundle does not recognize it, so the workflow now initializes successfully with javascript-typescript.

[Copilot]

@copilot the run hat errors

Addressed in 87d97d9. The failing php CodeQL language entry was removed; that specific init error is fixed. No UI changes were made, so there is no UI screenshot.

[BacLuc]

It didn't find anything. so i would say we let it be.