skrub
skrub copied to clipboard
Published
20 hours ago •
skrub-data
skrub-data
Implement CodeQL
Adds CodeQL, a tool for finding vulnerabilities and mistakes in the code. It was recommended by GitHub, let's see if this can be useful for us.
So, the output can be seen on the test, and the report has been exported to the Security tag of the repository.
No vulnerabilities nor mistakes have been found, which is good !
I don't think it is useful to run it for each PR, but I guess scanning the code before releases could be a good practice. To do that, we could create a codeql branch and push master onto it before releasing.
Let me know what you think !
