feat: add codeql

.github/workflows/codeql.yml

@@ -0,0 +1,45 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [main]
+  # schedule:
+  #   - cron: '23 12 * * 4'
+
+jobs:
+  analyze:
+    name: Analyze Code
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      matrix:
+        language: ["javascript"]
+        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]
+        # Learn more:
+        # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
+
+    steps:
+      - name: Checkout repository and submodules
+        uses: actions/checkout@v3
+        with:
+          submodules: recursive
+
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          languages: ${{ matrix.language }}
+          # If you wish to specify custom queries, you can do so here or in a config file.
+          # By default, queries listed here will override any specified in a config file.
+          # Prefix the list here with "+" to use these queries and those in the config file.
+          # queries: ./path/to/local/query, your-org/your-repo/queries@main
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2

src/tools/post-build.ts

@@ -13,7 +13,7 @@ const matchUrls = [
   "https://music.youtube.com/*", "https://www.youtube.com/*"
 ];
 
-const matchDirectives = matchUrls.reduce((a, c, i) => a + `// @match           ${c}${i === matchUrls.length - 1 ? "" : "\n"}`, "");
+const matchDirectives = matchUrls.reduce((a, c) => a + `// @match           ${c}\n`, "");
 
 const header = `\
 // ==UserScript==
@@ -26,7 +26,7 @@ const header = `\
 // @license         ${pkg.license}
 // @author          ${pkg.author.name}
 // @copyright       ${pkg.author.name} (${pkg.author.url})
-${matchDirectives}
+${matchDirectives}\
 // @icon            https://raw.githubusercontent.com/${repo}/main/resources/icon/icon.png
 // @run-at          document-start
 // @grant           GM.getValue