Setup CodeQL SAST

[leordev]

Similar to TBD54566975/tbdex-js#146

Which, btw, solves https://github.com/TBD54566975/web5-js/security/code-scanning/24

[codesandbox]

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[github-actions]

TBDocs Report

✅ No errors or warnings

@web5/api

• Project entry file: packages/api/src/index.ts

---

TBDocs Report Updated at 2024-01-25T18:12:46Z baa8a2a

[codecov]

Codecov Report

Merging #383 (baa8a2a) into main (25f1d03) will increase coverage by 91.90%.
Report is 1 commits behind head on main.
The diff coverage is n/a.

Additional details and impacted files

@@            Coverage Diff            @@
##           main     #383       +/-   ##
=========================================
+ Coverage      0   91.90%   +91.90%     
=========================================
  Files         0       67       +67     
  Lines         0    18241    +18241     
  Branches      0     1550     +1550     
=========================================
+ Hits          0    16764    +16764     
- Misses        0     1454     +1454     
- Partials      0       23       +23     

Components	Coverage Δ
agent	88.71% <ø> (∅)
api	96.94% <ø> (∅)
common	98.57% <ø> (∅)
credentials	∅ <ø> (∅)
crypto	94.60% <ø> (∅)
dids	92.24% <ø> (∅)
identity-agent	56.81% <ø> (∅)
crypto-aws-kms	100.00% <ø> (∅)
proxy-agent	58.43% <ø> (∅)
user-agent	55.22% <ø> (∅)

[nitro-neal]

lgtm

[frankhinek]

Since this is a security related tool, it should likely used Pinned Dependencies 😄

Otherwise we get dinged here: https://github.com/TBD54566975/web5-js/security/code-scanning/9

[leordev]

Nice catch! 🙏