website icon indicating copy to clipboard operation
website copied to clipboard

Feature : github-actions - setup CodeQL code scanning workflow

Open aialok opened this issue 1 year ago • 0 comments

Description

  • CodeQL is the code analysis engine developed by GitHub to automate security checks. You can analyze your code using CodeQL and display the results as code scanning alerts.
  • This helps us to prevent from security vulnerabilities or error in our codebase.
  • If code scanning finds a potential vulnerability or error in your code, GitHub displays an alert in the repository. After you fix the code that triggered the alert. GitHub closes the alert.

More details :

  • https://docs.github.com/en/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning-with-codeql
  • https://medium.com/technogise/github-code-scanning-5cc2c7f9f0e7 [ This is not beta anymore ]

For setting up this we need someone with access to repository setting to turn on the security permission.

Image

aialok avatar May 17 '24 10:05 aialok