sora2-network
sora2-network copied to clipboard
[Tech]: suggestion to use GH Code Scanning for Clippy
Problem statement
We can enhance work with cargo clippy if we use Github Code Scanning. It automates tracking of all findings and we can configure all the rules
Description
Use cargo clippy sarif addon to generate SARIF report with all findings and submit the report to GH Code Scanning. Then developers could see all the findings in Security
tab. We can configure all the rules with branch and merge in GH.
The approach mentioned above can be run in parallel with the current Jenkins workflow.
More about GH Code Scanning.
Definition of Done
- GH action for cargo clippy and sarif upload in
.github/worlflows/
. - GH Code Scanning is configured.
Requirements
No response