-
Notifications
You must be signed in to change notification settings - Fork 39
Labels
enhancementNew feature or requestNew feature or request
Description
Issue Description
Summary
The Codeql in the repository must support scanning GitHub Actions configurations as part of the Codeql analysis.
Details
A recent pull request (#436) introduced a change to the Codeql workflow file by adding "actions" to the language matrix. While this change was merged, it could be extended or reviewed further to ensure comprehensive scanning of all relevant code artefacts.
Steps to Reproduce
- Open the
.github/workflows/codeql-analysis.ymlfile. - Check the
languagematrix configuration. - Note that "actions" has been added for Codeql analysis.
Expected Outcome
The Codeql workflow should robustly analyse GitHub Actions configurations for potential vulnerabilities or issues.
Additional Context
This issue is based on the merged pull request #436, which introduced the initial change.
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request