Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

codeql.ymlを作成する#430

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Draft
UMEBOSHIISAN wants to merge1 commit intobinance:master
base:master
Choose a base branch
Loading
fromUMEBOSHIISAN:master

Conversation

@UMEBOSHIISAN
Copy link

@UMEBOSHIISANUMEBOSHIISAN commentedJul 4, 2025•
edited
Loading

Description

Add CodeQL GitHub Action to enable static code analysis for this repository.

Motivation

Improves security by enabling GitHub-native CodeQL scanning on every push or pull request.

Related Issues

N/A

@UMEBOSHIISAN
Copy link
Author

This pull request introduces a new CodeQL workflow configuration file to.github/workflows/codeql.yml. The file sets up advanced CodeQL analysis for Python and other supported languages, enabling automated security scanning and quality checks on code changes.

CodeQL Workflow Setup:

  • Added a new CodeQL workflow (.github/workflows/codeql.yml):
    • Configures CodeQL analysis for Python withbuild-mode: none and supports additional languages, including C/C++, Java/Kotlin, JavaScript/TypeScript, Ruby, Rust, Swift, and Actions.
    • Includes scheduled runs every Thursday at 23:23 UTC (cron: '23 23 * * 4') and triggers onpush andpull_request events for themaster branch.
    • Provides detailed comments and instructions for customizing the workflow, including adding setup steps, specifying custom queries, and handling manual build modes.

@UMEBOSHIISAN
Copy link
Author

@binance-dev-team
Please review this PR when you have time. It adds basic CodeQL support for static analysis.

@UMEBOSHIISANUMEBOSHIISAN marked this pull request as draftNovember 6, 2025 14:48
@UMEBOSHIISANUMEBOSHIISAN marked this pull request as ready for reviewNovember 6, 2025 14:50
@UMEBOSHIISANUMEBOSHIISAN marked this pull request as draftNovember 6, 2025 14:50
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@UMEBOSHIISAN
[8]ページ先頭
©2009-2025 Movatter.jp