Create codeql.yml #641
Create codeql.yml #641
Conversation
This action runs GitHub's industry-leading semantic code analysis engine, CodeQL, against a repository's source code to find security vulnerabilities. https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-with-codeql https://github.com/ossf/scorecard/blob/main/docs/checks.md#sast
There was a problem hiding this comment.
Looks good. Could you help us fix the issues this revealed as well? It looks like it should be just adding escapes to the dots in those urls, so nothing fancy. Now that I know about them, I guess I'd prefer to take care of them now before we forget or they get lost. Thanks!
I don't know ruby and don't want to change things that I can't test.
They won't get lost. It will be there in the security tab. I hope you understand. Thanks |
|
Yes, I think so. Thanks. |
This action runs GitHub's industry-leading semantic code analysis engine, CodeQL, against a repository's source code to find security vulnerabilities.
https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-with-codeql
https://github.com/ossf/scorecard/blob/main/docs/checks.md#sast