Skip to content

Learn how to simplify your code scanning workflows with CodeQL language matrices

License

Notifications You must be signed in to change notification settings

skills/configure-codeql-language-matrix

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Configuring a CodeQL language matrix

Configure your CodeQL workflows with a language matrix to simplify your code scanning workflows

Welcome

In this course we will explore how you can configure CodeQL using configuration files. During this course, we will show you how to add a query pack to a CodeQL configuration file, as well as configure your workflow to reference that configuration file.

  • Who is this for: Developers, security engineers, open source maintainers.
  • What you'll learn: We'll show you how to configure your workflow to use a language matrix. We will also cover the autobuild action for compiled languages. This will allow you to have a single code scanning workflow that covers all the languages in your repository.
  • What you'll build: A secure software development pipeline that has been tuned to your project's specific needs.
  • Prerequisites: Knowledge of how the context and expressions work in workflows. You can learn more about this in the GitHub Actions documentation.
  • How long: This course is 2 steps long and takes less than 30 minutes to complete.

How to start this course

start-course

  1. Right-click Start course and open the link in a new tab.
  2. In the new tab, most of the prompts will automatically fill in for you.
    • For owner, choose your personal account or an organization to host the repository.
    • We recommend creating a public repository, as private repositories will use Actions minutes.
    • Scroll down and click the Create repository button at the bottom of the form.
  3. After your new repository is created, wait about 20 seconds, then refresh the page. Follow the step-by-step instructions in the new repository's README.

Get help: Post in our discussion boardReview the GitHub status page

© 2024 GitHub • Code of ConductMIT License

About

Learn how to simplify your code scanning workflows with CodeQL language matrices

Topics

Resources

License

Code of conduct

Security policy

Stars

Watchers

Forks

Contributors 4

  •  
  •  
  •  
  •