1 files changed, 61 insertions, 0 deletions
diff --git a/.github/workflows/eslint.yaml b/.github/workflows/eslint.yaml
new file mode 100644
index 0000000..c5fe28c
--- /dev/null
+++ b/.github/workflows/eslint.yaml
@@ -0,0 +1,61 @@
+name: ESLint
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - "**.ts"
+      - "**.astro"
+      - "package.json"
+      - "pnpm-lock.yaml"
+
+      - "astro.config.ts"
+      - "eslint.config.js"
+      - "tsconfig.json"
+
+      - ".github/workflows/eslint.yaml"
+  pull_request:
+    paths:
+      - "**.ts"
+      - "**.astro"
+      - "package.json"
+      - "pnpm-lock.yaml"
+
+      - "astro.config.ts"
+      - "eslint.config.js"
+      - "tsconfig.json"
+
+      - ".github/workflows/eslint.yaml"
+
+jobs:
+  eslint:
+    name: Run scan
+
+    runs-on: ubuntu-latest
+
+    permissions:
+      security-events: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@v14
+
+      - name: Install Dependencies
+        run: nix develop .#ci --command pnpm install --frozen-lockfile
+
+      - name: Run ESLint
+        continue-on-error: true
+        run: |
+          nix develop .#ci --command \
+            nrr lint \
+            --format @microsoft/eslint-formatter-sarif \
+            --output-file /tmp/results.sarif
+
+      - name: Upload Results
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: /tmp/results.sarif
+          wait-for-processing: true