citus
citus copied to clipboard
Create CodeQL workflow for static analysis
This PR adds a new Github Actions Workflow to run our statical analysis tool, CodeQL.
TODO after getting some reviews:
- [ ] Remove
codeql-workflow
fromon.push.branches
as I included the feature branch there for easier development. - [ ] Consider removing all
on.push.branches
and run only on a cron schedule.
There are two issues raised by CodeQL now. We are aware of the possibility of the race condition, and it is safe to ignore those as it is actually a folse positive. I will use Github interface to ignore those after I get some approval from a team member.
our statical analysis tool, CodeQL.
This sounds useful. If it doesn't add too much overhead to the CI, do you plan to merge?
Codecov Report
Merging #5868 (fc760f1) into main (483b513) will decrease coverage by
0.01%
. The diff coverage isn/a
.
@@ Coverage Diff @@
## main #5868 +/- ##
==========================================
- Coverage 93.13% 93.12% -0.01%
==========================================
Files 259 259
Lines 55837 55839 +2
==========================================
- Hits 52003 52000 -3
- Misses 3834 3839 +5