azooKey icon indicating copy to clipboard operation
azooKey copied to clipboard

Add CodeQL workflow for automated code scanning

Open k-taro56 opened this issue 1 year ago • 4 comments

This pull request adds a CodeQL workflow for automated code scanning. The workflow file is included in the .github/workflows directory and is named codeql.yml. The workflow is triggered on push and pull request events on the develop branch, as well as on a weekly schedule. The workflow runs CodeQL analysis on the repository's codebase using the supported languages specified in the matrix. The analysis is performed on either ubuntu-latest or macos-latest runners, depending on the language. The workflow also sets the necessary permissions for the analysis, including read access to security events, packages, actions, and contents.

k-taro56 avatar Apr 30 '24 14:04 k-taro56

Default の CodeQL 有効なんですね Workflow になったの別になくてもよい感じ

k-taro56 avatar Apr 30 '24 14:04 k-taro56

Swift で Warning と Python の Code scanning results でなにか問題がありそう👀

k-taro56 avatar May 01 '24 23:05 k-taro56

なるほど、それぞれのWarningは別途対応すれば良いので、一旦これでマージしちゃってもいいですが、どうしますか?

ensan-hcl avatar May 03 '24 09:05 ensan-hcl

ごめんなさい、見逃してました。マージしてもいいかと思います。

k-taro56 avatar May 17 '24 01:05 k-taro56

承知です!

ensan-hcl avatar May 17 '24 16:05 ensan-hcl