👷 Add CodeQL CI Pipeline

Signed-off-by: Pascal Marco Caversaccio <[email protected]>

.github/workflows/codeql.yml

@@ -0,0 +1,35 @@
+name: 🔍️ CodeQL
+
+on: [push, pull_request, workflow_dispatch]
+
+jobs:
+  analyse:
+    runs-on: ${{ matrix.os }}
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    strategy:
+      matrix:
+        os:
+          - ubuntu-latest
+        language:
+          - javascript-typescript
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Initialise CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+          queries: +security-and-quality
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+
+      - name: Perform CodeQL analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:${{matrix.language}}"

package.json

@@ -124,7 +124,7 @@
     "@matterlabs/hardhat-zksync-deploy": "^1.2.0",
     "@matterlabs/hardhat-zksync-ethers": "1.0.0",
     "@matterlabs/hardhat-zksync-solc": "^1.1.4",
-    "@matterlabs/hardhat-zksync-verify": "^1.3.0",
+    "@matterlabs/hardhat-zksync-verify": "^1.4.0",
     "@nomicfoundation/hardhat-chai-matchers": "^2.0.6",
     "@nomicfoundation/hardhat-ethers": "^3.0.5",
     "@nomicfoundation/hardhat-foundry": "^1.1.1",
@@ -155,7 +155,7 @@
     "ts-node": "^10.9.2",
     "typechain": "^8.3.2",
     "typescript": "^5.3.3",
-    "typescript-eslint": "^7.0.2",
+    "typescript-eslint": "^7.1.0",
     "xdeployer": "^3.0.1",
     "zksync-ethers": "^6.3.0"
   }