fix: enable CodeQL SAST workflow#6277
Conversation
…anch and pull requests. This addresses OpenSSF Scorecard alert #71 (SASTID) requiring SAST scanning on all commits. Signed-off-by: clubanderson <clubanderson@users.noreply.github.com>
kubestellar-prow
Bot
added
the
dco-signoff: yes
✅ Deploy Preview for kubestellar-docs ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
kubestellar-prow
Bot
added
the
size/M
There was a problem hiding this comment.
Pull request overview
Enables a previously-disabled CodeQL workflow so the repository runs SAST on pushes to main, PRs targeting main, and on a weekly schedule—addressing the OpenSSF Scorecard SASTID finding referenced in #6275.
Changes:
- Adds an active
.github/workflows/codeql.ymlworkflow withpush,pull_request, andscheduletriggers. - Configures CodeQL analysis for
javascript-typescriptusing pinned action SHAs.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| name: CodeQL Analysis | ||
|
|
||
| on: |
clubanderson
changed the title
Signed-off-by: clubanderson <clubanderson@users.noreply.github.com>
kubestellar-prow
Bot
added
size/XS
|
Thank you for your contribution! Your PR has been merged. Check out what's new:
Stay connected: Slack #kubestellar-dev | Multi-Cluster Survey |
Fixes #6275
Enables CodeQL analysis workflow to run SAST on all commits to the main branch and pull requests, addressing OpenSSF Scorecard alert #71 (SASTID). The workflow was previously disabled and has been activated with proper triggers for both push and pull_request events.