Skip to content

ci: Add CodeQl workflow#478

Merged
anakrish merged 1 commit intomicrosoft:mainfrom
anakrish:codeql
Sep 22, 2025
Merged

ci: Add CodeQl workflow#478
anakrish merged 1 commit intomicrosoft:mainfrom
anakrish:codeql

Conversation

@anakrish
Copy link
Copy Markdown
Collaborator

No description provided.

@github-advanced-security
Copy link
Copy Markdown

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Adds a multi-language CodeQL security analysis workflow to CI to scan core crate and various language bindings.

  • Introduces a matrix build covering Rust, C/C++, Python, Java/Kotlin, Go, C#, and JS/TS (WASM) bindings.
  • Implements language/toolchain setup and manual build steps before invoking CodeQL analysis.
  • Schedules weekly scans and runs on pushes and PRs to main.

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@anakrish anakrish force-pushed the codeql branch 8 times, most recently from 3aa6caf to e70baad Compare September 20, 2025 17:40
Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
@anakrish anakrish merged commit 57f2e77 into microsoft:main Sep 22, 2025
41 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants