From d72f42efd58d57c257dcf66f2719e3784382bfdd Mon Sep 17 00:00:00 2001
From: Wes MacDonald <wesmacdonald@msn.com>
Date: Fri, 2 Oct 2026 02:43:32 +0000
Subject: [PATCH 1/3] Add dependabot configuration for automated dependency
 updates

---
 .github/dependabot.yml | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..9f092b5
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,36 @@
+version: 2
+updates:
+  - package-ecosystem: nuget
+    directory: "/src/SecureFix.Api"
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: nuget
+    directory: "/src/SecureFix.Core"
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: nuget
+    directory: "/tests/SecureFix.Tests"
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: docker
+    directory: "/"
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: github-actions
+    directory: "/.github/workflows"
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5

From 2cfdbd1057da9ae47c05889c74b798c39761377d Mon Sep 17 00:00:00 2001
From: Wes MacDonald <wesmacdonald@msn.com>
Date: Fri, 2 Oct 2026 02:47:22 +0000
Subject: [PATCH 2/3] Add CodeQL configuration and workflow for security
 analysis

---
 .github/codeql/codeql-config.yml |  8 +++++++
 .github/workflows/codeql.yml     | 41 ++++++++++++++++++++++++++++++++
 2 files changed, 49 insertions(+)
 create mode 100644 .github/codeql/codeql-config.yml
 create mode 100644 .github/workflows/codeql.yml

diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml
new file mode 100644
index 0000000..ff8bb30
--- /dev/null
+++ b/.github/codeql/codeql-config.yml
@@ -0,0 +1,8 @@
+name: SecureFix CodeQL config
+
+queries:
+  - uses: security-extended
+
+paths-ignore:
+  - "**/bin/**"
+  - "**/obj/**"
\ No newline at end of file
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
new file mode 100644
index 0000000..338d267
--- /dev/null
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,41 @@
+name: CodeQL
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+      - master
+  pull_request:
+    branches:
+      - main
+      - master
+  schedule:
+    - cron: '23 4 * * 1'
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+jobs:
+  analyze:
+    name: Analyze C#
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v5
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: csharp
+          config-file: ./.github/codeql/codeql-config.yml
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+
+      - name: Perform CodeQL analysis
+        uses: github/codeql-action/analyze@v3
\ No newline at end of file

From 41af7be7ce947474d09ba7c706c14c812f3a65fb Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 2 Oct 2026 02:54:09 +0000
Subject: [PATCH 3/3] Avoid CodeQL upload conflict with default setup

Co-authored-by: wesmacdonald <1325956+wesmacdonald@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 338d267..6a46834 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -38,4 +38,6 @@ jobs:
         uses: github/codeql-action/autobuild@v3
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@v3
\ No newline at end of file
+        uses: github/codeql-action/analyze@v3
+        with:
+          upload: false
\ No newline at end of file