🤖 Update action workflows

Author: stoe

.github/workflows/codeql.yml

@@ -0,0 +1,32 @@
+name: codeql
+
+on:
+  pull_request:
+    paths:
+      - '*/*.mjs'
+      - '.github/workflows/codeql.yml'
+
+jobs:
+  codeql:
+    runs-on: ubuntu-latest
+
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ['javascript']
+
+    steps:
+      - uses: actions/checkout@v2.3.4
+
+      - uses: github/codeql-action/init@v1
+        with:
+          languages: ${{ matrix.language }}
+
+      - uses: github/codeql-action/autobuild@v1
+
+      - uses: github/codeql-action/analyze@v1

.github/workflows/test.yml

@@ -1,26 +1,32 @@
-name: Test
+name: test
 
 on:
   push:
-    branches-ignore:
+    branches:
       - main
+    paths-ignore:
+      - '*.md'
+  pull_request:
+    branches:
+      - main
+    paths-ignore:
+      - '*.md'
 
 jobs:
   test:
     runs-on: ubuntu-latest
 
+    permissions: read-all
+
+    env:
+      CI: true
+
     strategy:
       matrix:
         node-version: [14.x, 16.x]
 
     steps:
       - uses: actions/checkout@v2.3.4
-        with:
-          fetch-depth: 2
-          lfs: true
-
-      - run: git checkout HEAD^2
-        if: ${{ github.event_name == 'pull_request' }}
 
       - uses: actions/setup-node@v2.2.0
         with:
@@ -30,9 +36,5 @@ jobs:
       - run: npm install --ignore-scripts --pure-lockfile
 
       - run: npm run build --if-present
-        env:
-          CI: true
 
       - run: npm run test --if-present
-        env:
-          CI: true

readme.md

@@ -2,7 +2,7 @@
 
 > Action to create a CSV or Markdown report of GitHub Actions used
 
-[![Test](https://github.com/ActionsDesk/report-action-usage/actions/workflows/test.yml/badge.svg)](https://github.com/ActionsDesk/report-action-usage/actions/workflows/test.yml) [![styled with prettier](https://img.shields.io/badge/styled_with-prettier-ff69b4.svg)](https://github.com/prettier/prettier)
+[![test](https://github.com/ActionsDesk/report-action-usage/actions/workflows/test.yml/badge.svg)](https://github.com/ActionsDesk/report-action-usage/actions/workflows/test.yml) [![codeql](https://github.com/ActionsDesk/report-action-usage/actions/workflows/codeql.yml/badge.svg)](https://github.com/ActionsDesk/report-action-usage/actions/workflows/codeql.yml) [![styled with prettier](https://img.shields.io/badge/styled_with-prettier-ff69b4.svg)](https://github.com/prettier/prettier)
 
 ## Usage