Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add code scanning workflow to identify common issues #2744

Merged
merged 5 commits into from
Apr 8, 2021

Conversation

davwheat
Copy link
Member

Changes proposed in this pull request:
Adds a GitHub CodeQL code scanning workflow to GitHub Actions.

Fore more info about what this does, please see GitHub's website: https://codeql.github.com/docs/codeql-overview/about-codeql/

Reviewers should focus on:

@dsevillamartin
Copy link
Member

I'm not very familiar with code scanning, but based on the output of the action & the other commit check added by the code scanning itself, it seems to work fine?

I would add the matrix language like our PHP testing does so the (javascript) isn't in parentheses maybe?
Something like this maybe, to follow the other commit check names. Just a thought.

name: 'Analyze / ${{ matrix.language }}'

strategy:
fail-fast: false
matrix:
language: [ 'javascript' ]
Copy link
Sponsor Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should typescript be listed too? I'm assuming its included in javascript,

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is :)

@davwheat davwheat merged commit 300dadf into master Apr 8, 2021
@davwheat davwheat deleted the dw/add-code-scanning branch April 8, 2021 11:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants