feat(.github/workflows/always.yml): codeql

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,11 +1,13 @@
-# Summary
+# Change
 
-{FIXME}
+## Issues
+
+- #{FIXME}
 
-# Details
+## Summary
 
 {FIXME}
 
-# Changes in action
+## Changes in action
 
 {FIXME}

.github/actions/junit/README.md

@@ -0,0 +1,11 @@
+# (testing) junit
+
+[![Test actions/junit](https://github.com/percebus/github-actions-testing/actions/workflows/test_actions__junit.yml/badge.svg)](https://github.com/percebus/github-actions-testing/actions/workflows/test_actions__junit.yml)
+
+[`LICENSE`](./LICENSE)
+
+A wrapper for all
+
+- [`publish-test-deltas`](../publish-test-deltas)
+- [`test-reporter`](../test-reporter)
+- [`test-summary`](../test-summary/)

.github/actions/publish-test-deltas/README.md

@@ -1,5 +1,9 @@
 # publish-test-deltas
 
+[![Test actions/publish-test-deltas](https://github.com/percebus/github-actions-testing/actions/workflows/test_actions__publish-test-deltas.yml/badge.svg)](https://github.com/percebus/github-actions-testing/actions/workflows/test_actions__publish-test-deltas.yml)
+
+[`LICENSE`](./LICENSE)
+
 ## permissions
 
 [Permissions](https://github.com/EnricoMi/publish-unit-test-result-action?tab=readme-ov-file#permissions)

.github/actions/test-reporter/README.md

@@ -1,5 +1,9 @@
 # test-reporter
 
+[![Test actions/test-reporter](https://github.com/percebus/github-actions-testing/actions/workflows/test_actions__test-reporter.yml/badge.svg)](https://github.com/percebus/github-actions-testing/actions/workflows/test_actions__test-reporter.yml)
+
+[`LICENSE`](./LICENSE)
+
 ## permissions
 
 [Recommended setup for public repositories](https://github.com/dorny/test-reporter?tab=readme-ov-file#recommended-setup-for-public-repositories)

.github/actions/test-summary/README.md

@@ -1,5 +1,9 @@
 # test-summary
 
+[![Test actions/test-summary](https://github.com/percebus/github-actions-testing/actions/workflows/test_actions__test-summary.yml/badge.svg)](https://github.com/percebus/github-actions-testing/actions/workflows/test_actions__test-summary.yml)
+
+[`LICENSE`](./LICENSE)
+
 ## Screenshots
 
 ### Summary

.github/workflows/always.yml

@@ -8,8 +8,30 @@ concurrency:
   group: ${{ github.ref }}-${{ github.workflow }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     uses: percebus/github-actions-npm/.github/workflows/run_script.yml@main
     with:
       script: lint
+
+  codeQL:
+    needs: lint
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language:
+          - actions
+          - javascript
+
+    name: "CodeQL: ${{ matrix.language }}"
+    uses: percebus/github-actions-compliance/.github/workflows/codeql_analyze.yml@main
+    with:
+      language: ${{ matrix.language }}