Try adding CodeQL static analysis workflow

conveyal / analysis-backend

Server component of Conveyal Analysis

http://conveyal.com/analysis

MIT License

23 stars 12 forks source link

Try adding CodeQL static analysis workflow #273

Closed trevorgerhardt closed 3 years ago

trevorgerhardt commented 4 years ago

Free, easy setup for what seems like a decent tool to be scanning our code regularly for vulnerabilities.

Example results: https://github.com/conveyal/analysis-ui/security/code-scanning/1?query=ref%3Arefs%2Fheads%2Fdev

abyrd commented 3 years ago

I am archiving this repository (which has been merged into R5). As part of this process I'm closing all PRs. We can consider migrating any PRs over to R5.