mirror of
https://github.com/semantica-agi/semantica.git
synced 2026-08-29 04:26:20 +00:00
Adds explicit CodeQL analysis workflow triggered on push/PR to main and weekly schedule. Without this, GitHub Default Setup only runs on a schedule — alerts do not re-scan after a PR merge, leaving fixed vulnerabilities still shown as open. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>