website
website copied to clipboard
Feature : github-actions - setup CodeQL code scanning workflow
Description
- CodeQL is the code analysis engine developed by GitHub to automate security checks. You can analyze your code using CodeQL and display the results as code scanning alerts.
- This helps us to prevent from security vulnerabilities or error in our codebase.
- If code scanning finds a potential vulnerability or error in your code, GitHub displays an alert in the repository. After you fix the code that triggered the alert. GitHub closes the alert.
More details :
- https://docs.github.com/en/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning-with-codeql
- https://medium.com/technogise/github-code-scanning-5cc2c7f9f0e7 [ This is not beta anymore ]
For setting up this we need someone with access to repository setting to turn on the security permission.