toltec
toltec copied to clipboard
Code scanning alerts
Should we set these up?
This proposes to add a CodeQL workflow to the repo, or other commercial tools from the marketplace. CodeQL does not support Bash, but can provide insights on Python code which could be interesting.
It also supports cpp, which we could probably use if we embed it into our build process.