codethesaurus / codethesaur.us

A polyglot developer reference tool to compare programming language concepts side-by-side! Great for learning new languages or using for reference.
https://codethesaur.us
GNU Affero General Public License v3.0
288 stars 170 forks source link

Add CodeQL scan to CI/CD #716

Closed geekygirlsarah closed 5 months ago

geekygirlsarah commented 9 months ago

Description

CodeQL can help scan for code vulnerabilities. This should add that in.

See: https://docs.github.com/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning-at-scale#eligible-repositories-for-codeql-default-setup

Where: https://github.com/codethesaurus/codethesaur.us/settings/security_analysis#code_scanning_settings

Requirements

A CodeQL scan can run upon pull requests or pushes to main

Additional Notes

This might be a thing @geekygirlsarah will have to set up.

geekygirlsarah commented 5 months ago

Done!