New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Set up CodeQL scans #815

Open

artem-smotrakov wants to merge 1 commit into bcgit:master from artem-smotrakov:enable-codeql-scans

Contributor

artem-smotrakov commented Oct 22, 2020

GitHub now offers static analysis scans for open-source projects. The scans are based on CodeQL engine that is also used on lgtm.com

https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/enabling-code-scanning-for-a-repository

When enabled on pull requests, the scans help to prevent introducing multiple issues (including security ones).

This pull requests adds a GitHub action that runs a scan for master branch and pull requests.


          Set up CodeQL scans

2f98b11

Contributor Author

artem-smotrakov commented Oct 22, 2020

Here is how the checks on pull requests are going to look:

artem-smotrakov#1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment