Simplify security analysis - remove conflicts #5

	name: "Security Analysis"

	on:
	push:
	branches: [ "starting_on_git", "main", "master" ]
	pull_request:
	branches: [ "starting_on_git", "main", "master" ]

	jobs:
	# Solo análisis JavaScript con CodeQL
	codeql-js:
	name: JavaScript Security Scan
	runs-on: ubuntu-latest
	permissions:
	actions: read
	contents: read
	security-events: write

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	# Esperar a que GitHub desactive completamente la configuración automática
	- name: Wait for GitHub setup
	run: sleep 10

	- name: Initialize CodeQL
	uses: github/codeql-action/init@v3
	with:
	languages: javascript

	- name: Autobuild
	uses: github/codeql-action/autobuild@v3

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v3

	# Análisis básico de Dart sin CodeQL
	dart-analysis:
	name: Dart Code Quality
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup Flutter
	uses: subosito/flutter-action@v2
	with:
	flutter-version: '3.16.0'
	channel: 'stable'

	- name: Get dependencies
	run: \|
	cd frontend
	flutter pub get

	- name: Analyze Dart code
	run: \|
	cd frontend
	echo "🔍 Running Dart analysis..."
	dart analyze lib/ --fatal-warnings \|\| echo "⚠️ Analysis completed with warnings"

	- name: Check for security issues
	run: \|
	cd frontend
	echo "🔐 Checking for common security issues..."
	# Check for hardcoded secrets
	grep -r "password\\|secret\\|key\\|token" lib/ --include=".dart" \| grep -v "//.password" \|\| echo "✅ No hardcoded secrets found"
	echo "📋 Analysis complete"

Navigation Menu