[CIAPP-5553] Adding code scanning - Githubissues

DataDog / ci-teamcity-plugin

Apache License 2.0

2 stars 1 forks source link

[CIAPP-5553] Adding code scanning #37

Closed andrea-mosk closed 1 year ago

andrea-mosk commented 1 year ago

What does this PR do?

Adding code scanning

Review checklist

[x] I have added unit tests if applicable
[x] (Only for critical changes) I have tested that the changes work in a TeamCity server

andrea-mosk commented 1 year ago

LGTM although I don't know much about these configs

@TovRudyy For future references, some notes:

Code scanning is required for open source repositories to check for vulnerabilities.
The job doing code scanning is security-check. Most of the stuff on the job is the default when enabling CodeQL scanning for GitHub.
I'm caching Maven dependencies between jobs using the cache action so that they are not re-downloaded every time a mvn command is executed. This significantly decreases execution time for the commands.

Happy to have a chat if you want to understand more :)