[Mikey Lombardi (He/Him) (michaeltlombardi)]

PR Summary

Adds an initial workflow for CodeQL scanning.

PR Checklist

• Descriptive Title: This PR's title is a synopsis of the changes it proposes.
• Summary: This PR's summary describes the scope and intent of the change.
• Contributor's Guide: I have read the contributors guide.
• Style: This PR adheres to the style guide.

[learn-build-service-prod]

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

[learn-build-service-prod]

Learn Build status updates of commit 6498d62:

✅ Validation status: passed

File	Status	Preview URL	Details
.github/workflows/codeql.yml	✅Succeeded

For more details, please refer to the build report.

[Copilot]

🟢 Approval recommended

The workflow is straightforward, and no blocking issues were identified.

No open issues 🎉

What changed in this PR

Adds CodeQL scanning for the repository’s GitHub Actions workflows.

Changes:

• Runs on pushes and pull requests targeting main and live, weekly, or manually.
• Uses extended security and quality queries with language-specific analysis results.

File	Description
.github/​workflows/​codeql.yml	Adds the CodeQL workflow, triggers, permissions, and analysis steps.

_{Review effort: Balanced}

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.