From fe68610ee5204a3cfc180eb3315f0dd529dfb10c Mon Sep 17 00:00:00 2001
From: "code-ranker-app[bot]"
 <296515340+code-ranker-app[bot]@users.noreply.github.com>
Date: Sun, 28 Jun 2026 22:11:38 +0000
Subject: [PATCH] Add code-ranker report workflow

---
 .github/workflows/code-ranker.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 .github/workflows/code-ranker.yml

diff --git a/.github/workflows/code-ranker.yml b/.github/workflows/code-ranker.yml
new file mode 100644
index 0000000..4b0d7ff
--- /dev/null
+++ b/.github/workflows/code-ranker.yml
@@ -0,0 +1,12 @@
+name: code-ranker
+on:
+  pull_request:
+  push:
+jobs:
+  code-ranker:
+    # Pinned to an immutable commit SHA (supply-chain hardening); the trailing
+    # `# v1` lets Dependabot bump the pin when a new release moves the v1 tag.
+    uses: code-ranker-com/actions/.github/workflows/report.yml@4caae2a061c307b4fa6d517d87a956873957d41c # v1
+    permissions:
+      # Only permission needed — reads your code to analyze it.
+      contents: read