Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Scan for security vulnerabilities with GitHub CodeQL #645

Open
rgoldberg opened this issue Nov 20, 2024 · 0 comments · May be fixed by #646
Open

Scan for security vulnerabilities with GitHub CodeQL #645

rgoldberg opened this issue Nov 20, 2024 · 0 comments · May be fixed by #646
Assignees
Labels
🧽 chore Administrative task: documentation, build, test, release, git, etc.
Milestone

Comments

@rgoldberg
Copy link
Contributor

Scan for security vulnerabilities with GitHub CodeQL by adding .github/workflows/codeql.yml workflow.

@rgoldberg rgoldberg added the 🧽 chore Administrative task: documentation, build, test, release, git, etc. label Nov 20, 2024
@rgoldberg rgoldberg self-assigned this Nov 20, 2024
@rgoldberg rgoldberg added this to the 1.8.8 milestone Nov 21, 2024
rgoldberg added a commit to rgoldberg/mas that referenced this issue Nov 21, 2024
Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>
rgoldberg added a commit to rgoldberg/mas that referenced this issue Nov 21, 2024
Use `runs-on: macos-15`.

Don't analyze `ruby` or `c-cpp`.

Perform `security-and-quality` queries.

Remove parentheses from job name.

Remove unnecessary settings.

Remove unnecessary comments.

Fix lint spacing violations.

Use double quotes instead of single quotes.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>
rgoldberg added a commit to rgoldberg/mas that referenced this issue Nov 21, 2024
Other cleanup from the release improvements PR to ensure that this workflow doesn't cause any other issues for this PR.

Resolve mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>
rgoldberg added a commit to rgoldberg/mas that referenced this issue Dec 1, 2024
Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>
rgoldberg added a commit to rgoldberg/mas that referenced this issue Dec 1, 2024
Use `runs-on: macos-15`.

Don't analyze `ruby` or `c-cpp`.

Perform `security-and-quality` queries.

Remove parentheses from job name.

Remove unnecessary settings.

Remove unnecessary comments.

Fix lint spacing violations.

Use double quotes instead of single quotes.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>
rgoldberg added a commit to rgoldberg/mas that referenced this issue Dec 1, 2024
Other cleanup from the release improvements PR to ensure that this workflow doesn't cause any other issues for this PR.

Resolve mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>
rgoldberg added a commit to rgoldberg/mas that referenced this issue Dec 2, 2024
Scan for security vulnerabilities with GitHub CodeQL by adding `codeql.yml` workflow.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>
rgoldberg added a commit to rgoldberg/mas that referenced this issue Dec 2, 2024
Use `runs-on: macos-15`.

Don't analyze `ruby` or `c-cpp`.

Perform `security-and-quality` queries.

Remove parentheses from job name.

Remove unnecessary settings.

Remove unnecessary comments.

Fix lint spacing violations.

Use double quotes instead of single quotes.

Partial mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>
rgoldberg added a commit to rgoldberg/mas that referenced this issue Dec 2, 2024
Other cleanup from the release improvements PR to ensure that this workflow doesn't cause any other issues for this PR.

Resolve mas-cli#645

Signed-off-by: Ross Goldberg <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🧽 chore Administrative task: documentation, build, test, release, git, etc.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant