Update CI config (#188)

* update CodeQL workflow
* remove git credentials after checkout
* switch to Node.js 18 LTS
* add `workflow_dispatch`

Author: XhmikosR

.github/workflows/codeql.yml

@@ -2,9 +2,16 @@ name: "CodeQL"
 
 on:
   push:
+    branches:
+      - main
+      - "!dependabot/**"
   pull_request:
+    branches:
+      - main
+      - "!dependabot/**"
   schedule:
     - cron: "0 0 * * 0"
+  workflow_dispatch:
 
 jobs:
   analyze:
@@ -18,11 +25,19 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3
+        with:
+          persist-credentials: false
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v2
         with:
           languages: "javascript"
+          queries: +security-and-quality
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v2
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v2
+        with:
+          category: "/language:javascript"

.github/workflows/lint.yml

@@ -1,27 +1,30 @@
 name: Lint
 
-on: [push, pull_request]
+on: [push, pull_request, workflow_dispatch]
 
 env:
   FORCE_COLOR: 2
-  NODE: 16
+  NODE: 18 # The Node.js version to run lint on
 
 jobs:
-  lint:
+  run:
+    name: Lint
     runs-on: ubuntu-latest
 
     steps:
       - name: Clone repository
         uses: actions/checkout@v3
+        with:
+          persist-credentials: false
 
       - name: Set up Node.js
         uses: actions/setup-node@v3
         with:
-          node-version: "${{ env.NODE }}"
+          node-version: ${{ env.NODE }}
           cache: npm
 
       - name: Install npm dependencies
         run: npm ci
 
-      - name: Lint
+      - name: Run lint
         run: npm run lint

.github/workflows/test.yml

@@ -1,9 +1,10 @@
 name: Tests
 
-on: [push, pull_request]
+on: [push, pull_request, workflow_dispatch]
 
 env:
   FORCE_COLOR: 2
+  NODE_COV: 18 # The Node.js version to run coveralls on
 
 jobs:
   test:
@@ -30,6 +31,8 @@ jobs:
     steps:
       - name: Clone repository
         uses: actions/checkout@v3
+        with:
+          persist-credentials: false
 
       - name: Set up Node.js
         uses: actions/setup-node@v3
@@ -50,14 +53,14 @@ jobs:
 
       - name: Run full tests
         run: npm run test:coverage
-        if: matrix.os == 'ubuntu-latest'
+        if: startsWith(matrix.os, 'ubuntu')
 
       - name: Run tests
         run: npm run mocha
-        if: matrix.os == 'windows-latest'
+        if: startsWith(matrix.os, 'windows')
 
       - name: Run Coveralls
         uses: coverallsapp/[email protected]
-        if: matrix.os == 'ubuntu-latest' && matrix.node == 16
+        if: startsWith(matrix.os, 'ubuntu') && matrix.node == env.NODE_COV
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"