search

github / roadmap

GitHub public roadmap
Creative Commons Attribution 4.0 International
7.77k stars 934 forks source link

Code scanning default setup scans `on:schedule` #759

Open github-product-roadmap opened 1 year ago

github-product-roadmap commented 1 year ago

Summary

Code scanning default setup will now also analyze the repository's default branch following a pre-configured schedule (like GitHub Actions' on: schedule trigger).

Intended Outcome

Analyzing the default branch on schedule ensures that a repository's code is scanned and protected even when it is not actively contributed to. This means that repositories will automatically benefit from updates to the CodeQL analysis, even when there are no code changes. This brings the CodeQL default setup configuration in line with the CodeQL starter workflow.

How will it work?

Code scanning default setup sets up CodeQL on a repository without committing a workflow file. This now also analyzes the default branch on weekly schedule. This brings the CodeQL default setup configuration in line with the CodeQL starter workflow.

ankneis commented 10 months ago

🚢 This has shipped: https://github.blog/changelog/2023-08-22-code-scanning-default-setup-now-analyzes-on-a-weekly-schedule.

Leaving open to track for GHES release.