ci: add codeql analysis in workflows #240
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Codecov Report
@@ Coverage Diff @@
## main #240 +/- ##
=======================================
Coverage 67.17% 67.17%
=======================================
Files 145 145
Lines 15261 15261
=======================================
Hits 10251 10251
Misses 4241 4241
Partials 769 769
Flags with carried forward coverage won't be shown. Click here to find out more. Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here. |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
|
/hold for remaining issues
|
jasonliu747
force-pushed
the
codeql
branch
2 times, most recently
from
1873693
to
b8851cb
Compare
jasonliu747
force-pushed
the
codeql
branch
3 times, most recently
from
bb0f21e
to
516879f
Compare
jasonliu747
force-pushed
the
codeql
branch
4 times, most recently
from
445ae30
to
c92e392
Compare
jasonliu747
force-pushed
the
codeql
branch
2 times, most recently
from
0e04588
to
552c71d
Compare
jasonliu747
force-pushed
the
codeql
branch
4 times, most recently
from
4403ebc
to
f7299f0
Compare
jasonliu747
force-pushed
the
codeql
branch
2 times, most recently
from
f76b213
to
6a0e78a
Compare
Signed-off-by: Jason Liu <jasonliu747@gmail.com>
|
/approve |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: hormes The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Signed-off-by: Jason Liu jasonliu747@gmail.com
Ⅰ. Describe what this PR does
CodeQL is the analysis engine used by developers to automate security checks, and by security researchers to perform variant analysis.
In CodeQL, code is treated like data. Security vulnerabilities, bugs, and other errors are modeled as queries that can be executed against databases extracted from code.
This PR would allow our CI to discover vulnerabilities across a codebase with CodeQL.