fix(cascade): let ElevenLabs buffer the turn instead of forcing a generation per chunk #33

	name: CodeQL

	# Static analysis over the plugin's Python and over these workflow files
	# themselves. Runs on every PR and push to main, plus a weekly sweep so a
	# newly published query still lands on an idle repo.
	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	schedule:
	- cron: "23 4 * * 1" # Mondays 04:23 UTC
	workflow_dispatch:

	# Workflow-level grant is read-only; the one write the analyze job needs
	# (uploading its SARIF to code scanning) is granted on that job alone, so a
	# job added later starts read-only instead of inheriting a write.
	permissions:
	contents: read

	concurrency:
	group: codeql-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	analyze:
	name: Analyze (${{ matrix.language }})
	runs-on: ubuntu-latest
	timeout-minutes: 20
	permissions:
	contents: read
	security-events: write # upload results to code scanning
	strategy:
	fail-fast: false
	matrix:
	language: [actions, python]
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
	with:
	languages: ${{ matrix.language }}
	build-mode: none

	- uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
	with:
	category: "/language:${{ matrix.language }}"

Navigation Menu