-
Notifications
You must be signed in to change notification settings - Fork 53
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
add CodeQL configuration #2186
add CodeQL configuration #2186
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approved assuming comments are addressed
Comments addressed. Still needs repo admin to turn on CodeQL Advanced mode to enable this configuration. |
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
.github/workflows/codeql.yml
Outdated
branches: ["main"] | ||
pull_request: | ||
branches: ["main"] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
add following to branch lists please:
v.?[0-9]+.[0-9]+.[0-9]+
v.?[0-9]+.[0-9]+
v?[0-9]+.[0-9]+.[0-9]+
v?[0-9]+.[0-9]+
Signed-off-by: James Xin <james.xin@improving.com>
b0830ac
to
40aa1bc
Compare
* add CodeQL configuration --------- Signed-off-by: James Xin <james.xin@improving.com>
This CodeQL configuration is primarily a default configuration generated by github, which enabled security check for all languages, including Java-Kotlin, python, node-js, go and c#. The only change made is to exclude the
examples
directory for CodeQL through an external configuration file.github/codeql/codeql-config.yml
.