Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Agree on automated code-scanning tool #7

Open
1 task
janhalen opened this issue Jun 26, 2024 · 2 comments
Open
1 task

Agree on automated code-scanning tool #7

janhalen opened this issue Jun 26, 2024 · 2 comments

Comments

@janhalen
Copy link
Contributor

What needs to be done

  • @janhalen suggests tooling based on the needs of the @OS2agora/maintainers and @OS2agora/developers teams
@janhalen janhalen changed the title Agree on automated code-quality analysis Agree on automated code-scanning tool Jun 26, 2024
@janhalen
Copy link
Contributor Author

janhalen commented Jun 26, 2024 •
edited
Loading

I suggest we for simplicitys sake enable the built in GitHub framework CodeQL on the code repositories.

Its integrates fluently in the GitHub PR flow and supports C#, both delivering a good strategic fit for os2agora.

@janhalen
Copy link
Contributor Author

Alternatives, that delivers different approaches:

https://github.com/marketplace/actions/devskim

https://github.com/zaproxy/action-baseline, https://github.com/zaproxy/action-full-scan

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@janhalen