Introduce CodeQL security vulnerability analysis #573
Conversation
Stephan202
force-pushed
the
sschroevers/introduce-codeql-analysis
branch
from
9005796
to
bb73e5d
Compare
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
error-prone-contrib/src/main/java/tech/picnic/errorprone/bugpatterns/DirectReturn.java
Fixed
Show fixed
Hide fixed
|
Looks good. No mutations were possible for these changes. |
1 similar comment
|
Looks good. No mutations were possible for these changes. |
|
Looks good. No mutations were possible for these changes. |
|
Kudos, SonarCloud Quality Gate passed!
|
|
Looks good. No mutations were possible for these changes. |
.github/workflows/codeql.yml
Outdated
| @@ -0,0 +1,44 @@ | |||
| # Analyzes the code base using Github's default CodeQL query database. | |||
There was a problem hiding this comment.
| # Analyzes the code base using Github's default CodeQL query database. | |
| # Analyzes the code base using GitHub's default CodeQL query database. |
rickie
added
the
chore
While there, tweak some indentation in another GitHub Actions workflow file.
This reverts commit 512648b.
rickie
force-pushed
the
sschroevers/introduce-codeql-analysis
branch
from
3d96164
to
d116ef4
Compare
|
Looks good. No mutations were possible for these changes. |
1 similar comment
|
Looks good. No mutations were possible for these changes. |
|
Tnx for the review! |
rickie
changed the title
Suggested commit message:
See the commit history for some things I tried and tested. I temporarily introduced code that referenced MD5 to trigger a warning. That code was flagged at the relevant source code line (see collapsed message). Here one can see the resolved violation.