devstream
devstream copied to clipboard
:four_leaf_clover: `Proposal`: Integrate CodeQL into CI
What Would You Like to Add? Why Is This Needed?
CodeQL is a tool made by GitHub to “automate security checks” and is "free for research and open source." I think we could use this tool to enhance dtm's security. Also, there is an existing GitHub action (https://github.com/github/codeql-action) which makes the integration a lot easier.
Design
NONE
Anything else
CodeQL Docs: https://codeql.github.com/docs/
A great proposal. Would you like to take over this feature?
A great proposal. Would you like to take over this feature?
sure