通过代码扫描查找代码中的安全漏洞和错误
使用code scanning来识别和修复代码中潜在的安全漏洞和其他错误,以确保代码的安全。
Code scanning is available for all public repositories on GitHub.com. Code scanning is also available for private repositories owned by organizations that use GitHub Enterprise Cloud and have a license for GitHub Advanced Security. 有关详细信息,请参阅“关于 GitHub Advanced Security”。
- 自动扫描代码以查找漏洞和错误
- 关于代码扫描
- About code scanning alerts
- Triaging code scanning alerts in pull requests
- Setting up code scanning for a repository
- Managing code scanning alerts for your repository
- Tracking code scanning alerts in issues using task lists
- Configuring code scanning
- About code scanning with CodeQL
- 推荐用于运行 CodeQL 的硬件资源
- Configuring the CodeQL workflow for compiled languages
- Troubleshooting the CodeQL workflow
- Running CodeQL code scanning in a container
- 查看代码扫描日志
- 与代码扫描集成
- 在现有 CI 系统上使用 CodeQL 代码扫描