Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci: add .github/workflows/codeql-analysis.yml #1698

Merged
merged 1 commit into from
Mar 12, 2022

Conversation

abetomo
Copy link
Collaborator

@abetomo abetomo commented Mar 11, 2022

Pull Request

Problem

Solution

How about introducing CodeQL?

ChangeLog

@shadowspawn
Copy link
Collaborator

Are you using it in any other projects? I have not used it before.

(Interested in giving it a go. I have not tried any of the various automated code analysis tools for quite a while. I do like having the TypeScipt and eslint checks!)

@abetomo
Copy link
Collaborator Author

abetomo commented Mar 11, 2022

I am beginning to use it for some of my projects.

For example, I have received alerts related to execSync.
Here is the content: https://codeql.github.com/codeql-query-help/javascript/js-shell-command-injection-from-environment/

Copy link
Collaborator

@shadowspawn shadowspawn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's give it a go. Thanks!

@abetomo abetomo merged commit b5d2bb1 into tj:develop Mar 12, 2022
@abetomo abetomo deleted the feature/add_codeql-analysis_yml branch March 12, 2022 01:11
@shadowspawn shadowspawn added the pending release Merged into a branch for a future release, but not released yet label Mar 14, 2022
@shadowspawn shadowspawn removed the pending release Merged into a branch for a future release, but not released yet label Apr 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants