this can't hurt

+1 from me

-michael

On 02.10.20 15:11, Aditya Sharma wrote:
Hi team,

I think we can enable the code scanning security feature for all the Roller
repositories available with GitHub that helps identifying security
vulnerabilities using CodeQL.

https://github.com/apache/roller/security/code-scanning
https://securitylab.github.com/tools/codeql

Citation from
https://www.infoworld.com/article/3453742/github-makes-codeql-free-for-research-and-open-source.html
:
*"CodeQL, a semantic code analysis engine and query tool for finding
security vulnerabilities across a codebase, has been made available for
free by GitHub for anyone to use in research or to analyze open source
code."*

If no one is against it, I will move ahead with it.

Thanks and Regards,
Aditya Sharma


Reply via email to