Skip to content

feat(resources): manage CodeQL default setup - #18

Open
natescherer wants to merge 1 commit into
noirbizarre:mainfrom
nateschererforks:feat/code-scanning-default-setup
Open

natescherer wants to merge 1 commit into
noirbizarre:mainfrom
nateschererforks:feat/code-scanning-default-setup

Conversation

@natescherer

Copy link
Copy Markdown

Hello! This PR adds the ability to configure the CodeQL default setup for repos.

Let me know if you have any questions or would like anything changed. Thanks!

A new `code_scanning.default_setup` section enables or disables default
setup and manages its query suite, threat model, languages and runners,
all through one PATCH. GitHub reports a language under every alias
(`javascript-typescript` reads back as three names), so both sides fold
aliases before comparing. A changed query suite, threat model or added
language reads back only once the CodeQL Setup run GitHub starts has
finished, which the field documentation states, along with GitHub leaving
a setup enabled on a repository without code idle once code arrives.
Verified against a real repository.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant