This directory contains CodeQL security scanning workflows for the organization.

Main security workflow that scans:

• JavaScript/TypeScript - No build required
• Python - No build required
• Go - Uses autobuild
• Ruby - No build required

Note: This workflow intentionally excludes C++, Java, C#, and Swift because:

1. The CodeQL repository has complex build requirements for these languages
2. The repository already has dedicated workflows for these languages (see codeql-analysis.yml, cpp-swift-analysis.yml, etc.)
3. For your own organization's simpler projects, you can add these languages back

Specialized workflow for monorepo setups with automatic language detection.

Optimized workflow for pull requests that only scans changed files.

When you copy these workflows to your other repositories, you can enable all languages:

language: [ 'javascript', 'python', 'java', 'csharp', 'cpp', 'go', 'ruby', 'swift' ]

Most projects have simpler build requirements and autobuild will work fine.

If autobuild fails in your projects, replace it with manual build steps:

# Example for Java with Maven
- name: Build with Maven
  if: matrix.language == 'java'
  run: mvn clean install -DskipTests

# Example for C++ with make
- name: Build C++
  if: matrix.language == 'cpp'
  run: |
    ./configure
    make

# Example for C# with dotnet
- name: Build C#
  if: matrix.language == 'csharp'
  run: |
    dotnet restore
    dotnet build

• ORGANIZATION_SETUP.md - Complete setup guide
• DEPLOYMENT_CHECKLIST.md - Deployment steps