Skip to content

Add static analysis automation and update security guidance - #53

Open
nickbaxter18 wants to merge 1 commit into
mainfrom
codex/integrate-sast-tools-into-ci-pipeline
Open

nickbaxter18 wants to merge 1 commit into
mainfrom
codex/integrate-sast-tools-into-ci-pipeline

Conversation

@nickbaxter18

Copy link
Copy Markdown
Owner

Summary

  • add a dedicated CodeQL workflow that performs scheduled full scans of the repository
  • extend the PR security gate with an incremental Semgrep diff scan that only reviews changed code
  • enhance the weekly security workflow with an optional Snyk Code scan and document the full program in SECURITY.md

Testing

  • pnpm lint-staged

https://chatgpt.com/codex/tasks/task_e_68d54b21cf4c8321b02d320d8ec49d67

@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant