Skip to content

Commit

Permalink
added codeql default configuration to repository configuration guide
Browse files Browse the repository at this point in the history
  • Loading branch information
paul-gilber committed Oct 28, 2023
1 parent 5b9cc81 commit 13cea7e
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
2 changes: 2 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,8 @@
# Demoapp Backend
This project was forked from: [arjungautam1/fullstack-backend](https://github.com/arjungautam1/fullstack-backend) and will be used for demonstration of DevOps CI/CD automation

See [repository configuration](docs/repository-configuration/README.md)

## Dependencies
1. MySQL database instance

Expand Down
2 changes: 0 additions & 2 deletions docs/repository-configuration/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,12 +2,10 @@

This section guides you on how this repository was setup


## Code Analysis/Scanning
### Configuring repository for GitHub CodeQL
[CodeQL](https://codeql.github.com/docs/codeql-overview/about-codeql/) is the analysis engine used by developers to automate security checks, and by security researchers to perform variant analysis.

In CodeQL, code is treated like data. Security vulnerabilities, bugs, and other errors are modeled as queries that can be executed against databases extracted from code. You can run the standard CodeQL queries, written by GitHub researchers and community contributors, or write your own to use in custom analyses. Queries that find potential bugs highlight the result directly in the source file.

See steps on [Configuring default setup for a repository](https://docs.github.com/en/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning#configuring-default-setup-for-a-repository)

0 comments on commit 13cea7e

Please sign in to comment.