sourabhsparkala opened a new pull request #74:
URL: https://github.com/apache/olingo-odata4/pull/74


   GitHub offers code scanning that is based on CodeQL (the same engine that is 
used in [LGTM.com](https://lgtm.com/)). Shortly, that's a static analysis tool 
that is able to catch various issues including security ones. Once enabled for 
pull requests, it would help with catching issues earlier.
   
   The scan may be run via [GitHub 
Actions](https://docs.github.com/en/code-security/secure-coding/automatically-scanning-your-code-for-vulnerabilities-and-errors/setting-up-code-scanning-for-a-repository#enabling-code-scanning-using-actions)
 for pull requests. Or, LGTM checks may be enabled, the instructions are 
[here](https://lgtm.com/help/lgtm/managing-automated-code-review).
   
   This pull request adds a GitHub workflow that runs CodeQL scans for pull 
requests and the main branch. It is also scheduled to run `weekly on Wednesday 
at 8:00 PM`. There results will be available:
   
   - in the "Security" tab for project maintainers
   - in each pull request (only new alerts or fixed ones)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@olingo.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to