Find strategy for keeping CodeQL packs up-to-date

[ericcornelissen]

Caused by #1831

Summary

In order to ensure consistent code scanning results - i.e. avoid findings without code changes - the CodeQL packs used by this project are pinned to a specific version:

shescape/.github/codeql.yml

Lines 5 to 7 in c74db24

	packs:
	- githubsecuritylab/[email protected]
	- githubsecuritylab/[email protected]

However, this introduces the problem of keeping these packs¹² up-to-date as update are released for them. This issue exists to find an automated solution for this. While it is open, we'll have to depend on polling instead.

If this issue is open and you find that any CodeQL pack used by this project is outdated, feel free to open a Pull Request to upgrade to the most recent (stable) release.

Footnotes

1. githubsecuritylab/codeql-javascript-queries ↩

2. githubsecuritylab/codeql-javascript-libs ↩