stanfordmlgroup / ngboost

Natural Gradient Boosting for Probabilistic Prediction
Apache License 2.0
1.64k stars 215 forks source link

Add CodeQL security scanning #210

Closed daikikatsuragawa closed 3 years ago

daikikatsuragawa commented 3 years ago

I propose to introduce CodeQL (code scanning) to this project. This is to prevent security problems hidden in the code.

https://securitylab.github.com/tools/codeql

ryan-wolbeck commented 3 years ago

@daikikatsuragawa Can you give us some context here?

daikikatsuragawa commented 3 years ago

I'm sorry that the explanation is missing. The description has been updated.

https://github.com/stanfordmlgroup/ngboost/pull/210#issue-520701277

ryan-wolbeck commented 3 years ago

@daikikatsuragawa I'll take a look, in the mean time the build in 3.6 failed if you want to triage

ryan-wolbeck commented 3 years ago

bump @daikikatsuragawa, can you triage to fix the build issues?

ryan-wolbeck commented 3 years ago

Closing until an update occurs, feel free to re-open when fixed