subhashis2204 / project-annapurna

This is the project annapurna repository
https://project-annapurna.azurewebsites.net/
MIT License
10 stars 28 forks source link

[FEATURE]: add codeql workflow #81

Open harmeetsingh11 opened 1 year ago

harmeetsingh11 commented 1 year ago

Description

Is your feature request related to a problem? Please describe.

The repository contains code in javascript, it does not have workflow for code scanning.

Describe the solution you'd like

I want to add the codeql workflow to automate security checks. CodeQL is the code analysis engine developed by GitHub to identify vulnerabilities in code. It will analyze your code and display the results as code scanning alerts. It will be enabled on every push, commit and pull request using GitHub actions.

Screenshots

No response

Additional information

Record

subhashis2204 commented 1 year ago

Hey @harmeetsingh11 thanks for bringing this up. I have assigned you the issue.