Skip to content

Add a CodeQL static analysis task#1300

Merged
Aniruddh25 merged 8 commits intomainfrom
codeql
Mar 3, 2023
Merged

Add a CodeQL static analysis task#1300
Aniruddh25 merged 8 commits intomainfrom
codeql

Conversation

@Aniruddh25
Copy link
Collaborator

@Aniruddh25 Aniruddh25 commented Mar 3, 2023

Why make this change?

  • CodeQL provides advanced analysis capabilities for data flow and control flow in the source code for discovering vulnerabilities See https://codeql.github.com/

What is this change?

  • Adds a new task in static analysis pipeline. It increases the build time by ~ 13min but since the test pipelines(run in parallel) take longer than this, the increment due to this task is acceptable.
  • Found a test code not meeting requirements - fix is to use at least 2048 as the key size for RSA.

How was this tested?

  • Ran the pipeline.

@Aniruddh25 Aniruddh25 enabled auto-merge (squash) March 3, 2023 03:47
@Aniruddh25 Aniruddh25 merged commit 3d9af9d into main Mar 3, 2023
@Aniruddh25 Aniruddh25 deleted the codeql branch March 3, 2023 04:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants