通过代码扫描查找代码中的安全漏洞和错误
使用code scanning来识别和修复代码中潜在的安全漏洞和其他错误,以确保代码的安全。
Code scanning is available for all public repositories on GitHub.com. To use code scanning in a private repository owned by an organization, you must have a license for GitHub Advanced Security. 有关详细信息,请参阅“关于 GitHub Advanced Security”。
- 自动扫描代码以查找漏洞和错误
- 关于代码扫描
- About code scanning alerts
- Triaging code scanning alerts in pull requests
- Setting up code scanning for a repository
- Managing code scanning alerts for your repository
- Tracking code scanning alerts in issues using task lists
- Configuring code scanning
- About code scanning with CodeQL
- 推荐用于运行 CodeQL 的硬件资源
- Configuring the CodeQL workflow for compiled languages
- Troubleshooting the CodeQL workflow
- Running CodeQL code scanning in a container
- 查看代码扫描日志
- 与代码扫描集成
- 在现有 CI 系统上使用 CodeQL 代码扫描