Update eslint.yml

.github/workflows/eslint.yml

@@ -1,36 +1,48 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+# ESLint is a tool for identifying and reporting on patterns
+# found in ECMAScript/JavaScript code.
+# More details at https://github.com/eslint/eslint
+# and https://eslint.org
+
 name: ESLint
 
 on:
   push:
     branches: [ "master" ]
   pull_request:
+    # The branches below must be a subset of the branches above
     branches: [ "master" ]
   schedule:
     - cron: '16 19 * * 2'
 
 jobs:
   eslint:
-    name: Run ESLint Scanning
+    name: Run eslint scanning
     runs-on: ubuntu-latest
     permissions:
       contents: read
       security-events: write
-      actions: read
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
 
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Run ESLint
+      - name: Install ESLint
         run: |
-          npx eslint . \
-            --ignore-pattern '**/*-spec.*' \
-            --ignore-pattern 'test/**' \
-            --ext .js,.jsx,.ts,.tsx \
-            --format @microsoft/eslint-formatter-sarif \
-            --output-file eslint-results.sarif
+          npm install eslint@8.10.0
+          npm install @microsoft/eslint-formatter-sarif@3.1.0
+      - name: Run ESLint
+        env:
+          SARIF_ESLINT_IGNORE_SUPPRESSED: "true"
+        run: npx eslint .
+          --ignore-path .eslintignore
+          --config .eslintrc.json
+          --ext .js,.jsx,.ts,.tsx
+          --format @microsoft/eslint-formatter-sarif
+          --output-file eslint-results.sarif
         continue-on-error: true
 
       - name: Upload analysis results to GitHub