New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Scan for security vulnerabilities with GitHub CodeQL #645

Closed

rgoldberg opened this issue Nov 20, 2024 · 0 comments · Fixed by #646

Assignees

Labels

🧽 chore

Milestone

Contributor

rgoldberg commented Nov 20, 2024 •

edited

Loading

Scan for security vulnerabilities with GitHub CodeQL by adding .github/workflows/codeql.yml workflow.

Use CodeQL for as much as possible:

Available languages:
- swift
- actions (GitHub Workflows)
Search for other languages:
- zsh
- YAML besides GitHub Workflows
- JSON (+ Package.resolved, .swift-format)
- Markdown

Also ensure dependabot is setup properly:

https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide

The text was updated successfully, but these errors were encountered:

rgoldberg added the 🧽 chore label

rgoldberg self-assigned this

rgoldberg mentioned this issue

Scan for security vulnerabilities with GitHub CodeQL #646

Merged

rgoldberg added this to the 1.8.8 milestone

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Scan for security vulnerabilities with GitHub CodeQL

8c24e04

Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Improve .github/workflows/codeql.yml.

e30d891

Use `runs-on: macos-15`.

Don't analyze `ruby` or `c-cpp`.

Perform `security-and-quality` queries.

Remove parentheses from job name.

Remove unnecessary settings.

Remove unnecessary comments.

Fix lint spacing violations.

Use double quotes instead of single quotes.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Set GITHUB_TOKEN for Boostrap step.

4b89224

Other cleanup from the release improvements PR to ensure that this workflow doesn't cause any other issues for this PR.

Resolve mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Scan for security vulnerabilities with GitHub CodeQL

b62268c

Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Improve .github/workflows/codeql.yml.

3fa27ac

Use `runs-on: macos-15`.

Don't analyze `ruby` or `c-cpp`.

Perform `security-and-quality` queries.

Remove parentheses from job name.

Remove unnecessary settings.

Remove unnecessary comments.

Fix lint spacing violations.

Use double quotes instead of single quotes.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Set GITHUB_TOKEN for Boostrap step.

0171f23

Other cleanup from the release improvements PR to ensure that this workflow doesn't cause any other issues for this PR.

Resolve mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Scan for security vulnerabilities with GitHub CodeQL

86e11ef

Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Improve .github/workflows/codeql.yml.

47e1cba

Use `runs-on: macos-15`.

Don't analyze `ruby` or `c-cpp`.

Perform `security-and-quality` queries.

Remove parentheses from job name.

Remove unnecessary settings.

Remove unnecessary comments.

Fix lint spacing violations.

Use double quotes instead of single quotes.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Set GITHUB_TOKEN for Boostrap step.

59f5e54

Other cleanup from the release improvements PR to ensure that this workflow doesn't cause any other issues for this PR.

Resolve mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg modified the milestones: 1.8.8, 1.8.9

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Scan for security vulnerabilities with GitHub CodeQL

9bc46b1

Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Improve .github/workflows/codeql.yml.

45ddafe

Use `runs-on: macos-15`.

Don't analyze `ruby` or `c-cpp`.

Perform `security-and-quality` queries.

Remove parentheses from job name.

Remove unnecessary settings.

Remove unnecessary comments.

Fix lint spacing violations.

Use double quotes instead of single quotes.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          CodeQL improvements.

df9b3bb

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          CodeQL improvements.

0da8425

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Scan for security vulnerabilities with GitHub CodeQL

95479ca

Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Improve .github/workflows/codeql.yml.

fb2f4af

Use `runs-on: macos-15`.

Don't analyze `ruby` or `c-cpp`.

Perform `security-and-quality` queries.

Remove parentheses from job name.

Remove unnecessary settings.

Remove unnecessary comments.

Fix lint spacing violations.

Use double quotes instead of single quotes.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          CodeQL improvements.

c76a84f

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Scan for security vulnerabilities with GitHub CodeQL

2c43f05

Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Improve .github/workflows/codeql.yml.

1abf999

Use `runs-on: macos-15`.

Don't analyze `ruby` or `c-cpp`.

Perform `security-and-quality` queries.

Remove parentheses from job name.

Remove unnecessary settings.

Remove unnecessary comments.

Fix lint spacing violations.

Use double quotes instead of single quotes.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          CodeQL improvements.

4117a8b

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Scan for security vulnerabilities with GitHub CodeQL

b5fba43

Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Improve .github/workflows/codeql.yml.

e1795a6

Use `runs-on: macos-15`.

Don't analyze `ruby` or `c-cpp`.

Perform `security-and-quality` queries.

Remove parentheses from job name.

Remove unnecessary settings.

Remove unnecessary comments.

Fix lint spacing violations.

Use double quotes instead of single quotes.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          CodeQL improvements.

56f3742

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Scan for security vulnerabilities with GitHub CodeQL

ccdadbc

Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg added a commit to rgoldberg/mas that referenced this issue


          Improve .github/workflows/codeql.yml.

1f7e391

Allow manual runs.

Run on all pushes & pull requests.

Use `runs-on: macos-15`.

Analyze GitHub workflows.

Don't analyze `ruby` or `c-cpp`.

Perform `security-and-quality` queries.

Remove parentheses from job name.

Remove unnecessary settings.

Remove unnecessary comments.

Remove unnecessary quotes.

Fix lint spacing violations.

Use double quotes instead of single quotes.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>

rgoldberg closed this as completed in #646

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment