Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Scan for security vulnerabilities with GitHub CodeQL #645

Open
rgoldberg opened this issue Nov 20, 2024 · 0 comments · May be fixed by #646
Open

Scan for security vulnerabilities with GitHub CodeQL #645

rgoldberg opened this issue Nov 20, 2024 · 0 comments · May be fixed by #646
Assignees
@rgoldberg
Labels
🧽 chore Administrative task: documentation, build, test, release, git, etc.
Milestone
1.8.8

Comments

@rgoldberg
Copy link
Contributor

Scan for security vulnerabilities with GitHub CodeQL by adding .github/workflows/codeql.yml workflow.
@rgoldberg rgoldberg added the 🧽 chore Administrative task: documentation, build, test, release, git, etc. label Nov 20, 2024
@rgoldberg rgoldberg self-assigned this Nov 20, 2024
@rgoldberg rgoldberg linked a pull request Nov 20, 2024 that will close this issue
Open
@rgoldberg rgoldberg added this to the 1.8.8 milestone Nov 21, 2024
rgoldberg added a commit to rgoldberg/mas that referenced this issue Nov 21, 2024
@rgoldberg
Scan for security vulnerabilities with GitHub CodeQL
8c24e04 
Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>
rgoldberg added a commit to rgoldberg/mas that referenced this issue Nov 21, 2024
@rgoldberg
Improve .github/workflows/codeql.yml.
e30d891 
Use `runs-on: macos-15`.

Don't analyze `ruby` or `c-cpp`.

Perform `security-and-quality` queries.

Remove parentheses from job name.

Remove unnecessary settings.

Remove unnecessary comments.

Fix lint spacing violations.

Use double quotes instead of single quotes.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>
rgoldberg added a commit to rgoldberg/mas that referenced this issue Nov 21, 2024
@rgoldberg
Set GITHUB_TOKEN for Boostrap step.
4b89224 
Other cleanup from the release improvements PR to ensure that this workflow doesn't cause any other issues for this PR.

Resolve mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@rgoldberg rgoldberg

Labels
🧽 chore Administrative task: documentation, build, test, release, git, etc.
Projects
None yet
Milestone
1.8.8
Development

Successfully merging a pull request may close this issue.

Scan for security vulnerabilities with GitHub CodeQL rgoldberg/mas
1 participant
@rgoldberg