Scan for security vulnerabilities with GitHub CodeQL #646
Conversation
rgoldberg
added
the
🧽 chore
rgoldberg
force-pushed
the
645-codeql
branch
3 times, most recently
from
6704118 to
4b89224
Compare
rgoldberg
force-pushed
the
645-codeql
branch
2 times, most recently
from
0171f23 to
59f5e54
Compare
|
@phatblat Thanks for approving. I got the workflows working, but I haven't yet looked through the output of CodeQL, so I'll probably get back to this after the release overhaul is done. I'll also try to ensure that the release overhaul didn't create any security issues by getting to this immediately after finishing the rest of the release process overhaul. |
rgoldberg
force-pushed
the
main
branch
7 times, most recently
from
d2b6f35 to
c8dc938
Compare
rgoldberg
force-pushed
the
645-codeql
branch
5 times, most recently
from
1be372f to
a617190
Compare
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
rgoldberg
force-pushed
the
645-codeql
branch
from
a617190 to
a615041
Compare
Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow. Partial mas-cli#645 Signed-off-by: Ross Goldberg <[email protected]>
Allow manual runs. Run on all pushes & pull requests. Use `runs-on: macos-15`. Analyze GitHub workflows. Don't analyze `ruby` or `c-cpp`. Perform `security-and-quality` queries. Remove parentheses from job name. Remove unnecessary settings. Remove unnecessary comments. Remove unnecessary quotes. Fix lint spacing violations. Use double quotes instead of single quotes. Partial mas-cli#645 Signed-off-by: Ross Goldberg <[email protected]>
rgoldberg
force-pushed
the
645-codeql
branch
from
a615041 to
1f7e391
Compare
Scan for security vulnerabilities with GitHub CodeQL by adding
.github/workflows/codeql.ymlworkflow.Resolve #645